diff --git a/docker-compose.yml b/docker-compose.yml index c39b3e04b..a3a874894 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -45,7 +45,7 @@ services: traefik.http.routers.app-router.service: app-service traefik.http.routers.app-router.tls: 'true' traefik.http.services.app-service.loadbalancer.healthcheck.path: /-/health/live/ - traefik.http.services.app-service.loadbalancer.server.port: '8000' + traefik.http.services.app-service.loadbalancer.server.port: '9000' env_file: - .env ports: diff --git a/lifecycle/gunicorn.conf.py b/lifecycle/gunicorn.conf.py index 1de4a1c57..e03372481 100644 --- a/lifecycle/gunicorn.conf.py +++ b/lifecycle/gunicorn.conf.py @@ -6,7 +6,7 @@ from multiprocessing import cpu_count import structlog from kubernetes.config.incluster_config import SERVICE_HOST_ENV_NAME -bind = "0.0.0.0:8000" +bind = "127.0.0.1:8000" user = "authentik" group = "authentik" diff --git a/website/docs/installation/docker-compose.md b/website/docs/installation/docker-compose.md index da808ebfc..81d680509 100644 --- a/website/docs/installation/docker-compose.md +++ b/website/docs/installation/docker-compose.md @@ -89,11 +89,7 @@ The docker-compose project contains the following containers: - server - This is the backend service, which does all the logic, runs the API and the actual SSO part. - -- static - - This container runs the frontend, hosts the JS/CSS files, and also servers the files you've uploaded for icons/etc. + This is the backend service, which does all the logic, runs the API and the actual SSO part. It also runs the frontend, hosts the JS/CSS files, and also servers the files you've uploaded for icons/etc. - worker @@ -103,14 +99,4 @@ The docker-compose project contains the following containers: Cache and database respectively. -- traefik - - Traefik is used so that you only have a single entry point, and don't need to configure a reverse proxy yourself. - - It does the following things: - - - Routes everything that starts with `/static`, `/if`, `/media`, `/robots.txt` or `/favicon.ico` to the *static* container on port 80 - - Routes everything else to the *server* container on port 8000 - - Does some minor health checking - Additionally, if you've enabled GeoIP, there is a container running which regularly updates the GeoIP database.