So I just learned today that docker-compose helpfully modifies IPTables directly when you expose ports to the host in the default networking mode.

[cthos@mastodon.cthos.dev]

So I just learned today that docker-compose helpfully modifies IPTables directly when you expose ports to the host in the default networking mode.

I... did not want to expose Postgres to the internet, docker. Thanks for that buddy.

[aud@fire.asta.lgbt]

@[email protected] haha what

[cthos@mastodon.cthos.dev]

@aud Yep. "Hey why are there hundreds of failed login attempts to this postgres instance's container. UFW is on....."

Ugh.

[aud@fire.asta.lgbt]

@[email protected] docker, stabbing your firewall full of holes “haha you didn’t need this right”

[aud@fire.asta.lgbt]

@[email protected] there is zero reason for this to be the default mode and so many for it to not be.