security: compose必填变量+环回绑定+nginx安全头/admin内网化；产物去跟踪88项；冻结规格+审计+BLOCKED runbook落盘

2026-09-16 18:18:42 +08:00
parent 5b3850c191
commit 6d22fb161f
95 changed files with 210 additions and 20 deletions
@@ -13,15 +13,15 @@
 services:
  postgres:
    ports: !override
-      - "15432:5432"
+      - "127.0.0.1:15432:5432"

  redis:
    ports: !override
-      - "16379:6379"
+      - "127.0.0.1:16379:6379"

  backend:
    ports: !override
-      - "18000:8000"
+      - "127.0.0.1:18000:8000"
    env_file:
      - docker.env
    volumes: