Get AI to fix vunerabilities in site

docker-compose.yml

@@ -69,8 +69,6 @@ services:
             - app-network
         volumes:
             - dbdata:/var/lib/postgresql/data
-        ports:
-            - 5432:5432
 
     icecast2:
         build:
@@ -82,8 +80,6 @@ services:
             - app-network
         env_file:
             - ./.env
-        ports:
-            - "${ICECAST_PORT}:${ICECAST_PORT}"
 
     gitea-runner:
         image: gitea/act_runner:latest
@@ -99,7 +95,7 @@ services:
         volumes:
             - ./gitea-runner/config.yaml:/config.yaml
             - ./gitea-runner/data:/data
-            - /var/run/docker.sock:/var/run/docker.sock
+            - /var/run/docker.sock:/var/run/docker.sock  # WARNING: Docker socket mount gives container host-level access. Runner is in 'disabled' profile to mitigate risk.
         restart: unless-stopped
         networks:
             - app-network
@@ -124,7 +120,6 @@ services:
             - /etc/timezone:/etc/timezone:ro
             - /etc/localtime:/etc/localtime:ro
         ports:
-            - "3000:3000"
             - "2222:2222"
         depends_on:
             - db