Skip to content

fix(docker): restrict test postgres port to localhost only#1033

Merged
zbigniewsobiecki merged 16 commits intodevfrom
fix/restrict-test-postgres-to-localhost
Mar 24, 2026
Merged

fix(docker): restrict test postgres port to localhost only#1033
zbigniewsobiecki merged 16 commits intodevfrom
fix/restrict-test-postgres-to-localhost

Conversation

@zbigniewsobiecki
Copy link
Copy Markdown
Member

Summary

  • Bind cascade-postgres-test to 127.0.0.1:5433 instead of 0.0.0.0:5433
  • Prevents the test database from being reachable on public network interfaces
  • Production postgres in infra/compose/docker-compose.yaml already uses this pattern

Test plan

  • CI passes
  • After deploying: ss -tlnp | grep 5433 shows 127.0.0.1:5433, not 0.0.0.0:5433
  • Integration tests still pass locally (npm run test:integration)

🤖 Generated with Claude Code

zbigniewsobiecki and others added 16 commits February 23, 2026 15:54
chore: release - merge dev into main
feat(codex): add subscription auth via CODEX_AUTH_JSON credential
… track turns via turn.completed

fix(codex): correctly parse agent_message/command_execution items and track turns via turn.completed
Deploy: include Trello webhook error body
fix(deploy): fix SELF_SIGNED_CERT_IN_CHAIN in production migration containers
Bind cascade-postgres-test to 127.0.0.1:5433 instead of 0.0.0.0:5433
to prevent the test database from being accessible on public interfaces.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@zbigniewsobiecki zbigniewsobiecki merged commit c674387 into dev Mar 24, 2026
9 checks passed
@zbigniewsobiecki zbigniewsobiecki deleted the fix/restrict-test-postgres-to-localhost branch March 24, 2026 15:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant