diff --git a/apps/archy-mempool-web/manifest.yml b/apps/archy-mempool-web/manifest.yml index 6d84df8d..d18acc76 100644 --- a/apps/archy-mempool-web/manifest.yml +++ b/apps/archy-mempool-web/manifest.yml @@ -26,6 +26,8 @@ app: - host: 4080 container: 8080 protocol: tcp + bind: 127.0.0.1 + auth: gated environment: - FRONTEND_HTTP_PORT=8080 diff --git a/apps/archy-nbxplorer/manifest.yml b/apps/archy-nbxplorer/manifest.yml index 21ce43bf..a13c1bb7 100644 --- a/apps/archy-nbxplorer/manifest.yml +++ b/apps/archy-nbxplorer/manifest.yml @@ -33,6 +33,8 @@ app: - host: 32838 container: 32838 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: - type: bind diff --git a/apps/barkd/manifest.yml b/apps/barkd/manifest.yml index 5ba3d40d..171ed869 100644 --- a/apps/barkd/manifest.yml +++ b/apps/barkd/manifest.yml @@ -51,6 +51,8 @@ app: - host: 3535 container: 3535 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: # Holds the wallet DB, mnemonic and auth token. ARK funds are recoverable diff --git a/apps/btcpay-server/manifest.yml b/apps/btcpay-server/manifest.yml index 8f42a95c..703a9f0c 100644 --- a/apps/btcpay-server/manifest.yml +++ b/apps/btcpay-server/manifest.yml @@ -45,6 +45,8 @@ app: - host: 23000 container: 49392 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/did-wallet/manifest.yml b/apps/did-wallet/manifest.yml index c89f6561..413df0a2 100644 --- a/apps/did-wallet/manifest.yml +++ b/apps/did-wallet/manifest.yml @@ -30,6 +30,8 @@ app: - host: 8088 container: 8080 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/fedimint-clientd/manifest.yml b/apps/fedimint-clientd/manifest.yml index 38d81bba..898b31be 100644 --- a/apps/fedimint-clientd/manifest.yml +++ b/apps/fedimint-clientd/manifest.yml @@ -66,6 +66,8 @@ app: - host: 8178 container: 8080 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: # Same dir the first-boot bundled path uses + where the wallet bridge reads diff --git a/apps/fedimint/manifest.yml b/apps/fedimint/manifest.yml index 88f17e15..c3c7985a 100644 --- a/apps/fedimint/manifest.yml +++ b/apps/fedimint/manifest.yml @@ -58,6 +58,8 @@ app: - host: 8177 container: 8175 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: - type: bind diff --git a/apps/filebrowser/manifest.yml b/apps/filebrowser/manifest.yml index 2d24bc14..a47b9431 100644 --- a/apps/filebrowser/manifest.yml +++ b/apps/filebrowser/manifest.yml @@ -27,6 +27,8 @@ app: - host: 8083 container: 80 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/gitea/manifest.yml b/apps/gitea/manifest.yml index 4926ba3f..0a4a2293 100644 --- a/apps/gitea/manifest.yml +++ b/apps/gitea/manifest.yml @@ -26,6 +26,8 @@ app: - host: 3001 container: 3000 protocol: tcp + bind: 127.0.0.1 + auth: gated - host: 2222 container: 22 protocol: tcp diff --git a/apps/grafana/manifest.yml b/apps/grafana/manifest.yml index ed6a6b42..3ef6938a 100644 --- a/apps/grafana/manifest.yml +++ b/apps/grafana/manifest.yml @@ -31,6 +31,8 @@ app: - host: 3000 container: 3000 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/home-assistant/manifest.yml b/apps/home-assistant/manifest.yml index 135db17b..7a4c3a2f 100644 --- a/apps/home-assistant/manifest.yml +++ b/apps/home-assistant/manifest.yml @@ -30,6 +30,8 @@ app: - host: 8123 container: 8123 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/immich/manifest.yml b/apps/immich/manifest.yml index 73fff674..a09b23dd 100644 --- a/apps/immich/manifest.yml +++ b/apps/immich/manifest.yml @@ -44,6 +44,8 @@ app: - host: 2283 container: 2283 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/indeedhub/manifest.yml b/apps/indeedhub/manifest.yml index 471678c4..a71f6777 100644 --- a/apps/indeedhub/manifest.yml +++ b/apps/indeedhub/manifest.yml @@ -38,6 +38,8 @@ app: - host: 7778 container: 7777 protocol: tcp # Web UI. Port 7777 on the host is reserved for the Nostr relay. + bind: 127.0.0.1 + auth: gated # Writable scratch the baked nginx needs; matches the legacy installer's # --tmpfs /run + /var/cache/nginx. diff --git a/apps/jellyfin/manifest.yml b/apps/jellyfin/manifest.yml index 7234c1c8..94ab1424 100644 --- a/apps/jellyfin/manifest.yml +++ b/apps/jellyfin/manifest.yml @@ -25,6 +25,8 @@ app: - host: 8096 container: 8096 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/mempool-api/manifest.yml b/apps/mempool-api/manifest.yml index 24b628ce..9bf8fe27 100644 --- a/apps/mempool-api/manifest.yml +++ b/apps/mempool-api/manifest.yml @@ -42,6 +42,8 @@ app: - host: 8999 container: 8999 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: - type: bind diff --git a/apps/mempool/manifest.yml b/apps/mempool/manifest.yml index fbaf7263..ee64420b 100644 --- a/apps/mempool/manifest.yml +++ b/apps/mempool/manifest.yml @@ -33,6 +33,8 @@ app: - host: 4080 container: 8080 # mempool-frontend nginx listens on 8080 (FRONTEND_HTTP_PORT=8080) protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/morphos-server/manifest.yml b/apps/morphos-server/manifest.yml index dd032bf4..32975649 100644 --- a/apps/morphos-server/manifest.yml +++ b/apps/morphos-server/manifest.yml @@ -30,6 +30,8 @@ app: - host: 8089 container: 8080 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/nextcloud/manifest.yml b/apps/nextcloud/manifest.yml index a8165868..6fb16d44 100644 --- a/apps/nextcloud/manifest.yml +++ b/apps/nextcloud/manifest.yml @@ -25,6 +25,8 @@ app: - host: 8085 container: 80 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/nostr-rs-relay/manifest.yml b/apps/nostr-rs-relay/manifest.yml index 975a07ae..5bfb5bde 100644 --- a/apps/nostr-rs-relay/manifest.yml +++ b/apps/nostr-rs-relay/manifest.yml @@ -31,6 +31,8 @@ app: - host: 18081 container: 8080 protocol: tcp # HTTP/WebSocket + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/photoprism/manifest.yml b/apps/photoprism/manifest.yml index 485d5936..88cbcb73 100644 --- a/apps/photoprism/manifest.yml +++ b/apps/photoprism/manifest.yml @@ -24,6 +24,8 @@ app: - host: 2342 container: 2342 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/portainer/manifest.yml b/apps/portainer/manifest.yml index 2307b504..70fdac89 100644 --- a/apps/portainer/manifest.yml +++ b/apps/portainer/manifest.yml @@ -27,6 +27,8 @@ app: - host: 9000 container: 9000 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/searxng/manifest.yml b/apps/searxng/manifest.yml index 1eeb727d..0727ff36 100644 --- a/apps/searxng/manifest.yml +++ b/apps/searxng/manifest.yml @@ -29,6 +29,8 @@ app: - host: 8888 container: 8080 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/strfry/manifest.yml b/apps/strfry/manifest.yml index ef74ed72..eac12a1d 100644 --- a/apps/strfry/manifest.yml +++ b/apps/strfry/manifest.yml @@ -29,6 +29,8 @@ app: - host: 8090 container: 7777 protocol: tcp # HTTP/WebSocket (strfry listens on 7777) + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/uptime-kuma/manifest.yml b/apps/uptime-kuma/manifest.yml index e58f0bbe..391b3c88 100644 --- a/apps/uptime-kuma/manifest.yml +++ b/apps/uptime-kuma/manifest.yml @@ -26,6 +26,8 @@ app: - host: 3002 container: 3001 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/vaultwarden/manifest.yml b/apps/vaultwarden/manifest.yml index 2f3d49d3..1e85629f 100644 --- a/apps/vaultwarden/manifest.yml +++ b/apps/vaultwarden/manifest.yml @@ -25,6 +25,8 @@ app: - host: 8082 container: 80 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind