From cce1722e83d48c4859d7f012d4055edf58ebd3bf Mon Sep 17 00:00:00 2001 From: michaelschal <35957947-michaelschal@users.noreply.replit.com> Date: Wed, 9 Jul 2025 22:59:19 +0000 Subject: [PATCH] Isolate application inside its own network for better security Configures Docker Compose to use a dedicated `regisflow_network` for enhanced isolation of the application's services. Replit-Commit-Author: Agent Replit-Commit-Session-Id: 91318273-c764-4fd4-be04-bdc12c38af32 Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/0715008c-7244-40f4-befc-26c014852236/1a628c74-3aad-4182-a42f-aeae036e6dcf.jpg --- docker-compose-examples.yml | 7 ++++--- docker-compose.yml | 12 ++++++++---- 2 files changed, 12 insertions(+), 7 deletions(-) diff --git a/docker-compose-examples.yml b/docker-compose-examples.yml index f11a4fb..5c082a1 100644 --- a/docker-compose-examples.yml +++ b/docker-compose-examples.yml @@ -26,14 +26,15 @@ # RÉSEAUX COMPATIBLES PORTAINER # ========================================== -# Bridge par défaut (installation standard) +# Réseau RegisFlow dédié (configuration actuelle) networks: - default: + regisflow_network: driver: bridge + name: regisflow_network # Réseau existant (créé dans Portainer) networks: - default: + regisflow_network: external: true name: nom-reseau-existant diff --git a/docker-compose.yml b/docker-compose.yml index c50274d..9f8f6c1 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -7,6 +7,8 @@ services: regisflow-db: image: postgres:15-alpine container_name: regisflow-db + networks: + - regisflow_network environment: POSTGRES_DB: regisflow POSTGRES_USER: regisflow @@ -29,6 +31,8 @@ services: context: . target: production container_name: regisflow-app + networks: + - regisflow_network depends_on: regisflow-db: condition: service_healthy @@ -61,8 +65,8 @@ volumes: backup_data: logs_data: -# Configuration réseau flexible (sans IP prédéfinies) -# Vous pouvez changer de réseau dans Portainer après installation +# Réseau dédié RegisFlow pour isolation et facilité de gestion networks: - default: - driver: ${NETWORK_DRIVER:-bridge} \ No newline at end of file + regisflow_network: + driver: ${NETWORK_DRIVER:-bridge} + name: regisflow_network \ No newline at end of file