harden docker deployment

docker-compose.yml

@@ -6,7 +6,7 @@ services:
       POSTGRES_USER: ${POSTGRES_USER:-drivers}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-drivers}
     ports:
-      - "${POSTGRES_PORT:-5433}:5432"
+      - "127.0.0.1:${POSTGRES_PORT:-5433}:5432"
     volumes:
       - pgdata:/var/lib/postgresql/data
     healthcheck:
@@ -27,7 +27,7 @@ services:
       API_BASE_URL: ${API_BASE_URL:-http://api:8000}
       WEBAPP_URL: ${WEBAPP_URL:-http://localhost:8000}
     ports:
-      - "8000:8000"
+      - "127.0.0.1:8000:8000"
     depends_on:
       db:
         condition: service_healthy