Bind health server to localhost

Author: 0xflashboy

backend/Dockerfile

@@ -25,8 +25,8 @@ RUN cargo build --release --bin backend
 
 # Expose WebSocket port
 EXPOSE 8443
-EXPOSE 443
+EXPOSE 7000
 
 # Set entrypoint with default server address for container
 ENTRYPOINT ["cargo", "run", "--release", "--bin", "backend", "--"]
-CMD ["--server-addr", "0.0.0.0:8443", "--health-server-addr", "0.0.0.0:443"]
+CMD ["--server-addr", "0.0.0.0:8443", "--health-server-addr", "127.0.0.1:7000"]

backend/Dockerfile_build_and_publish

@@ -46,8 +46,8 @@ COPY --from=builder /usr/src/app/restricted_filters.json /app/restricted_filters
 
 # Expose WebSocket port
 EXPOSE 8443
-EXPOSE 443
+EXPOSE 7000
 
 # Set entrypoint using absolute path or relative to WORKDIR
 ENTRYPOINT ["./backend"]
-CMD ["--server-addr", "0.0.0.0:8443", "--health-server-addr", "0.0.0.0:443"]
+CMD ["--server-addr", "0.0.0.0:8443", "--health-server-addr", "127.0.0.1:7000"]

docker-compose.yml

@@ -16,9 +16,9 @@ services:
       # Optional: Persistent logs volume
       - logs:/var/log/eventwatch
     restart: unless-stopped
-    command: ["--server-addr", "0.0.0.0:8443", "--health-server-addr", "0.0.0.0:443"]
+    command: ["--server-addr", "0.0.0.0:8443", "--health-server-addr", "127.0.0.1:7000"]
     healthcheck:
-      test: ["CMD-SHELL", "curl -sf http://0.0.0.0:443/health | grep -q '\"success\": true'"]
+      test: ["CMD-SHELL", "curl -sf http://127.0.0.1:7000/health | grep -q '\"success\": true'"]
       interval: 10s
       timeout: 5s
       retries: 3