From 072eeb78c29212629841216c90b394d521aef198 Mon Sep 17 00:00:00 2001
From: Haylan <code@arthurerlich.ch>
Date: Thu, 24 Sep 2026 21:47:16 +0200
Subject: [PATCH] fix(qdrant): bind port to loopback only

qdrant has no auth; it was reachable from the whole LAN.

Refs #55 (intent vs. source #63)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 3847f26..a68644a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -252,7 +252,7 @@ services:
     volumes:
       - qdrant-data:/qdrant/storage
     ports:
-      - "6333:6333"
+      - "127.0.0.1:6333:6333"
     restart: unless-stopped
     networks: [ai-stack]