2 Commits

Author SHA1 Message Date
Gan, Jimmy cdd364e645 security: bind service ports to localhost only
Bind navidrome, n8n, immich, openclaw, gitea web ports to 127.0.0.1
to prevent direct LAN access bypassing Caddy/Authelia.

Tailscale userspace networking on Synology proxies through localhost,
so VPS Caddy access via Tailscale IP continues to work.

Gitea SSH port (2222) remains on all interfaces for external git push.
2026-02-28 22:47:36 +08:00
Gan, Jimmy cbb4f8286b Add n8n docker-compose and include in backup 2026-02-26 14:58:42 +08:00