From 41d2cd785e526cc049402c0448d26bfc16508f6a Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Fri, 26 Jun 2026 16:58:41 +0000
Subject: [PATCH] =?UTF-8?q?R=C3=A9seaux=20explicites=20:=20app=20et=20Post?=
 =?UTF-8?q?gres=20partagent=20un=20r=C3=A9seau=20interne=20d=C3=A9di=C3=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Corrige ECONNREFUSED vers postgres:5432 apparu après l'ajout du réseau proxy.
Postgres et l'app sont désormais tous deux sur un réseau "internal" dédié
(résolution fiable de l'hôte "postgres"), l'app étant en plus sur le réseau
externe "proxy" pour le reverse proxy.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XwfhYHzC9hQWPDnQ2p53GL
---
 docker-compose.yml | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index adf0e15..ca87cc1 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -23,6 +23,8 @@ services:
       interval: 5s
       timeout: 5s
       retries: 12
+    networks:
+      - internal
 
   app:
     build: .
@@ -48,10 +50,10 @@ services:
       # Persists the auto-generated AUTH_SECRET across restarts.
       - appdata:/app/data
     networks:
-      # "default" lets the app reach Postgres; "proxy" is the external network
+      # "internal" is shared with Postgres; "proxy" is the external network
       # shared with the reverse proxy (e.g. Nginx Proxy Manager) so it can reach
       # the app by name: forward to  pleinr-app:3000
-      - default
+      - internal
       - proxy
 
 volumes:
@@ -59,7 +61,9 @@ volumes:
   appdata:
 
 networks:
-  default:
+  # Private network for app <-> Postgres communication.
+  internal:
+    driver: bridge
   proxy:
     # The reverse proxy's existing network. Must already exist (created by the
     # NPM/nginx stack). Override the name with PROXY_NETWORK if it differs.