db: seo postgres/mariadb/qdrant/redis ainult loopback + tailnet (mitte 0.0.0.0/LAN)

main/docker-compose.yml

@@ -25,7 +25,9 @@ services:
     container_name: postgres_postgis
     restart: always
     ports:
-      - "5432:5432"
+      # [2026-09-23] ainult loopback + Tailscale (LAN-ile mitte avatud)
+      - "127.0.0.1:5432:5432"
+      - "100.87.1.24:5432:5432"
     environment:
       POSTGRES_USER: ai_user
       POSTGRES_PASSWORD: ai_secure_pass_2026
@@ -53,7 +55,9 @@ services:
     container_name: mariadb
     restart: always
     ports:
-      - "3306:3306"
+      # [2026-09-23] ainult loopback + Tailscale (LAN-ile mitte avatud)
+      - "127.0.0.1:3306:3306"
+      - "100.87.1.24:3306:3306"
     environment:
       MYSQL_ROOT_PASSWORD: ai_root_pass_2026
       MYSQL_DATABASE: research_mariadb
@@ -107,8 +111,11 @@ services:
     container_name: qdrant
     restart: unless-stopped
     ports:
-      - "6333:6333"  # REST API
-      - "6334:6334"  # gRPC API
+      # [2026-09-23] ainult loopback + Tailscale (LAN-ile mitte avatud)
+      - "127.0.0.1:6333:6333"  # REST API
+      - "100.87.1.24:6333:6333"
+      - "127.0.0.1:6334:6334"  # gRPC API
+      - "100.87.1.24:6334:6334"
     environment:
       TZ: Europe/Tallinn
       LANG: C.UTF-8

third/server/redis/docker-compose.yml

@@ -7,7 +7,9 @@ services:
     environment:
       - TZ=Europe/Tallinn
     ports:
-      - "6379:6379"
+      # [2026-09-23] ainult loopback + Tailscale (LAN-ile mitte avatud)
+      - "127.0.0.1:6379:6379"
+      - "100.87.1.24:6379:6379"
     restart: unless-stopped
     volumes:
       - /data/docker/redis:/data