Files
petfeed/docker
admin 2d0e390c76 fix(infra): remove the direct host port exposure on 4563
Step 2/2 (Audit Gitea #17). NPM's proxy host now forwards to pawfeed:3000
over the shared nginx_default Docker network (verified working in the
previous deploy), so the app no longer needs a published host port at
all — it was reachable unencrypted on the LAN, bypassing Cloudflare's
TLS termination and protections entirely.
2026-08-13 13:01:58 +02:00
..