[A-06] `docker-compose.yml` publishes Postgres on host port 5432 #42

New issue

Open

opened 2026-10-11 20:15:35 -05:00 by pyaniz · 0 comments

pyaniz commented

2026-10-11 20:15:35 -05:00

Owner

Audit ID: A-06 · Priority: P1 · Effort: S

docker-compose.yml publishes Postgres on host port 5432 with fallback credentials thursday/thursday. Bind to 127.0.0.1 or drop the port mapping, and require a password from env.

Source: AUDIT_FINDINGS.md (audit 2026-10-11). Items marked (verify) need confirming first.

**Audit ID:** A-06 · **Priority:** P1 · **Effort:** S **`docker-compose.yml` publishes Postgres on host port 5432** with fallback credentials `thursday/thursday`. Bind to `127.0.0.1` or drop the port mapping, and require a password from env. Source: `AUDIT_FINDINGS.md` (audit 2026-10-11). Items marked *(verify)* need confirming first.

pyaniz added the

audit

security

labels

2026-10-11 20:15:35 -05:00