refactor: 보안 정책 준수를 위해 Keto 포트 외부 노출 제거 및 내부 통신으로 변경 #239

2026-02-11 16:25:02 +09:00
parent bb7f3a7b25
commit ab2a5462d4
5 changed files with 20 additions and 34 deletions
--- a/compose.ory.yaml
+++ b/compose.ory.yaml
@@ -121,9 +121,6 @@ services:
    keto:
        image: oryd/keto:${KETO_VERSION:-v25.4.0}
        container_name: ory_keto
-        ports:
-            - "4466:4466" # Read API
-            - "4467:4467" # Write API
        environment:
            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KETO_DB:-ory_keto}?sslmode=disable&max_conns=20
        volumes: