Bind postgres on Tailscale interface (100.66.187.183:5432) for pgAdmin access

2026-05-03 17:29:30 +00:00
parent 522e3e476b
commit b5dc50b0b2
1 changed files with 5 additions and 0 deletions
@@ -88,6 +88,11 @@ services:
    image: timescale/timescaledb-ha:pg16.6-ts2.17.2-all
    expose:
      - '5432'
+    # Bind Postgres to the Tailscale interface only — reachable from pgAdmin
+    # via the zero-trust mesh, never from the public internet. The internal
+    # `postgres:5432` hostname for stack peers (directus, processor) is unaffected.
+    ports:
+      - '100.66.187.183:5432:5432'
    volumes:
      - postgres-data:/home/postgres/pgdata/data
    environment: