harden docker deployment

.dockerignore

@@ -0,0 +1,14 @@
+.git/
+.history/
+.sixth/
+.env
+.env.*
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+.venv/
+venv/
+dist/
+build/

docker-compose.yml

@@ -6,7 +6,7 @@ services:
       POSTGRES_USER: ${POSTGRES_USER:-drivers}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-drivers}
     ports:
-      - "${POSTGRES_PORT:-5433}:5432"
+      - "127.0.0.1:${POSTGRES_PORT:-5433}:5432"
     volumes:
       - pgdata:/var/lib/postgresql/data
     healthcheck:
@@ -27,7 +27,7 @@ services:
       API_BASE_URL: ${API_BASE_URL:-http://api:8000}
       WEBAPP_URL: ${WEBAPP_URL:-http://localhost:8000}
     ports:
-      - "8000:8000"
+      - "127.0.0.1:8000:8000"
     depends_on:
       db:
         condition: service_healthy