Disable 0.0.0.0 listening

[4l1fe]

Hey. I see that by default web UI is served on 0.0.0.0 address. I prefer to have local services closed to public access and run them on 127.0.0.1.

How could i configure all the docker compose containers to listen 127.0.0.1 externally on a host system?

[dosubot[bot]]

Hi @4l1fe! I'm Dosu and I’m helping the agenta team.

The simplest way to do this is to prefix all port mappings in the docker-compose file with 127.0.0.1:. You don't need to change any application code — this controls binding at the Docker level.

For example, in whichever compose file you're using under hosting/docker-compose/oss/ [1], change every ports entry from:

ports:
  - "3000:3000"

to:

ports:
  - "127.0.0.1:3000:3000"

You'd want to do this for all services that expose ports to the host, including traefik (80, 8080), web (3000), postgres (5432), rabbitmq (5672, 15672), redis/cache (6378), and supertokens (3567) [1].

The containers will still internally bind to 0.0.0.0, but Docker will only forward traffic from 127.0.0.1 on the host, so the services won't be reachable from external machines.

To reply, just mention @dosu.

---

Share context across your team and agents. Try Dosu.