Docker open ports about clearml-server

[bmartinn]

Hi @dinist,

Nice job finding that miner :)

You can easily prevent external access the Redis, ElasticSearch and MongoDB dockers by removing the port mappings in the docker-compose.yml file. Just remove the following lines for each service:

• Redis: line 102 and line 103
• MongoDB: line 91 and line 92
• ElasticSearch: line 64 and line 65

Since all services use the backend internal docker network to access each other, these lines are optional and simply allow external access to these services.

Please note that we still advise you to make sure that the Trains Server is behind a firewall and/or access is via a VPN, since the Trains File Server ports are (and should be) open for external access and the Trains File Server will currently serve any request.

[dinist]

Thank you!