fix(deploy): network_mode: host + loopback for postgis/ollama #34

Merged

goldstein merged 1 commit from fix/host-network into main

2026-04-18 11:00:14 +00:00

goldstein commented

2026-04-18 11:00:12 +00:00

Owner

postgis is bound to 127.0.0.1 on the host; goldstein pattern of network_mode: host works. Drop extra_hosts + ports (unused in host mode). AppConfig defaults + .env.example + tests updated.

goldstein added 1 commit 2026-04-18 11:00:13 +00:00

fix(deploy): switch to network_mode: host — reach postgis + ollama on loopback

tests / test (push) Successful in 1m12s

Details

tests / test (pull_request) Successful in 1m10s

Details

c7dc40c51e

The shared postgis container is bound to 127.0.0.1 on the host (security
hardening, infrastructure §T12). Ollama is similarly LAN-hardened. The
previous `host.docker.internal + extra_hosts: host-gateway` approach
points at the bridge gateway IP, not loopback, so the container couldn't
reach either service.

Switch to `network_mode: host` (same pattern goldstein uses) and update
the default IX_POSTGRES_URL / IX_OLLAMA_URL to 127.0.0.1. Keep the GPU
reservation block; drop the now-meaningless ports: declaration (host mode
publishes directly).

AppConfig defaults + .env.example + test_config assertions + inline
docstring examples all follow.

Caught on fourth deploy attempt.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

goldstein merged commit 44c3428993 into main

2026-04-18 11:00:14 +00:00

goldstein referenced this pull request from a commit

2026-04-18 11:00:16 +00:00

fix(deploy): network_mode: host (#34)

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: goldstein/infoxtractor#34

No description provided.