From d13a4f14634c39cd03b6d38d862f131c9898091a Mon Sep 17 00:00:00 2001
From: Foohoo <foohoo@gmail.com>
Date: Sun, 18 Oct 2026 12:56:13 +0000
Subject: [PATCH] Bind published app port to localhost

nginx on the host proxies to it, so it does not need to be reachable on the
LAN directly.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 796630e..9b8b57b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -18,7 +18,7 @@ services:
       - BASIC_AUTH_PASS=${BASIC_AUTH_PASS}
     ports:
       # Select host port via APP_PORT env var; default 3000
-      - "${APP_PORT:-3000}:3000"
+      - "127.0.0.1:${APP_PORT:-3000}:3000"
     volumes:
       # Persist cache JSON files using a named volume
       - magikarp-data:/app/data