From 53c3dc42caee80b0f7fafd9c42832c10c269d1be Mon Sep 17 00:00:00 2001
From: VPN SaaS Dev <dev@vpnsaas.local>
Date: Tue, 12 May 2026 04:07:52 +0900
Subject: [PATCH] harden docker deployment

---
 .dockerignore      | 14 ++++++++++++++
 docker-compose.yml |  4 ++--
 2 files changed, 16 insertions(+), 2 deletions(-)
 create mode 100644 .dockerignore

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..97da9ff
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,14 @@
+.git/
+.history/
+.sixth/
+.env
+.env.*
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+.venv/
+venv/
+dist/
+build/
diff --git a/docker-compose.yml b/docker-compose.yml
index 379c958..d962583 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,7 +6,7 @@ services:
       POSTGRES_USER: ${POSTGRES_USER:-drivers}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-drivers}
     ports:
-      - "${POSTGRES_PORT:-5433}:5432"
+      - "127.0.0.1:${POSTGRES_PORT:-5433}:5432"
     volumes:
       - pgdata:/var/lib/postgresql/data
     healthcheck:
@@ -27,7 +27,7 @@ services:
       API_BASE_URL: ${API_BASE_URL:-http://api:8000}
       WEBAPP_URL: ${WEBAPP_URL:-http://localhost:8000}
     ports:
-      - "8000:8000"
+      - "127.0.0.1:8000:8000"
     depends_on:
       db:
         condition: service_healthy