chore: update docker-compose.yml

docker-compose.yml

@@ -5,8 +5,6 @@ services:
     image: postgres
     healthcheck:
       test: psql postgres --command "select 1" -U postgres
-    ports:
-      - "5432:5432"
     volumes:
       - postgres-volume:/var/lib/postgresql/data
     environment:
@@ -25,10 +23,13 @@ services:
       PACT_BROKER_DATABASE_URL: "postgres://postgres:password@postgres/postgres"
       PACT_BROKER_LOG_LEVEL: INFO
       PACT_BROKER_SQL_LOG_LEVEL: DEBUG
-      # PACT_BROKER_DATABASE_CONNECT_MAX_RETRIES is only needed for docker-compose 
+      # PACT_BROKER_DATABASE_CONNECT_MAX_RETRIES is only needed for docker-compose
       # because the database takes longer to start up than the puma process
       # Should not be needed in production.
       PACT_BROKER_DATABASE_CONNECT_MAX_RETRIES: "5"
+      # The list of allowed base URLs (not setting this makes the app vulnerable to cache poisoning)
+      # This allows the app to be addressed from the host from within another docker container correctly
+      PACT_BROKER_BASE_URL: 'https://localhost http://localhost http://localhost:9292 http://pact-broker:9292'
 
   # Nginx is not necessary, but demonstrates how
   # one might use a reverse proxy in front of the broker,
@@ -41,7 +42,7 @@ services:
       - ./ssl/nginx.conf:/etc/nginx/conf.d/default.conf:ro
       - ./ssl:/etc/nginx/ssl
     ports:
-      - "8443:443"
+      - "443:443"
       - "80:80"
 volumes:
   postgres-volume: