chore (security): port hardening, commented out non-critical ports

adguardhome/compose.yaml

@@ -10,7 +10,7 @@ services:
       - "53:53/udp"
       # - "67:67/udp" # DHCP
       # - "68:68/tcp" # DHCP
-      - "3000:3000/tcp"
+      # - "3000:3000/tcp"
     volumes:
       - ./data/work:/opt/adguardhome/work
       - ./data/conf:/opt/adguardhome/conf

authentik/compose.yaml

@@ -26,9 +26,9 @@ services:
     command: server
     container_name: authentik-server
     restart: unless-stopped
-    ports:
+    # ports:
-      - ${PORT_HTTP:-9000}:9000
+    #   - ${PORT_HTTP:-9000}:9000
-      - ${PORT_HTTPS:-9443}:9443
+    #   - ${PORT_HTTPS:-9443}:9443
     env_file:
       - .env
     environment:

homepages/compose.yaml

@@ -3,8 +3,8 @@ services:
     build:
       context: .
       dockerfile: Dockerfile.forust
-    ports:
+    # ports:
-      - "8085:80"
+    #   - "8085:80"
     restart: unless-stopped
     volumes:
       - ./forust_files:/usr/share/nginx/html
@@ -42,8 +42,8 @@ services:
     build:
       context: .
       dockerfile: Dockerfile.xdfnx
-    ports:
+    # ports:
-      - "8086:80"
+    #   - "8086:80"
     restart: unless-stopped
     volumes:
       - ./xdfnx_files:/usr/share/nginx/html
@@ -77,7 +77,6 @@ services:
       - "traefik.http.routers.xdfnx-dev.service=xdfnx-homepage"
       - "traefik.http.routers.xdfnx-dev.tls=true"
 
-
 networks:
   traefik-proxy:
     external: true

penpot/compose.yaml

@@ -86,8 +86,8 @@ services:
   penpot-frontend:
     image: "penpotapp/frontend:${PENPOT_VERSION:-latest}"
     restart: always
-    ports:
+    # ports:
-      - 9001:8080
+    #   - 9001:8080
 
     volumes:
       - penpot_assets:/opt/data/assets

termix/compose.yaml

@@ -3,8 +3,8 @@ services:
     image: ghcr.io/lukegus/termix:latest
     container_name: termix
     restart: unless-stopped
-    ports:
+    # ports:
-      - "3331:8080"
+    #   - "3331:8080"
     volumes:
       - ./termix-data:/app/data
     environment:

uptime-kuma/compose.yaml

@@ -5,9 +5,9 @@ services:
     container_name: uptime-kuma
     volumes:
       - ./data:/app/data
-    ports:
+      # ports:
       # <Host Port>:<Container Port>
-      - "3001:3001"
+      # - "3001:3001"
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=traefik-proxy"