security: bind exposed ports strictly to localhost (127.0.0.1)

docker-compose.prod.yml

@@ -13,7 +13,7 @@ services:
       - media_volume:/usr/src/app/media
       - staticfiles_volume:/usr/src/app/staticfiles
     ports:
-      - "8024:8000"
+      - "127.0.0.1:8024:8000"
     env_file:
       - .env.prod
     depends_on:
@@ -26,7 +26,7 @@ services:
   postgres:
     container_name: dovodi_db
     ports:
-      - "5513:5432"
+      - "127.0.0.1:5513:5432"
     restart: unless-stopped
     image: postgres:14.0
     volumes: