After using this setup for a while, I realized there are more open ports on my server than there should be - especially 8080 and 8888.
I don't know how this affects security, but according to the BBB Firewall Configuration Guide, they are at least open unnecessarily.
The issue is probably caused by network_mode: host disabling docker's network isolation. Maybe there's a chance to use a different network mode?
Another solution might be binding explicitly to localhost. At least for the nginx container that should be simple, I don't know about Kurento.
If this can't be fixed in docker setup, a last resort might be using a firewall on the docker host - but this requirement should be mentioned in the README then in my opinion.
After using this setup for a while, I realized there are more open ports on my server than there should be - especially 8080 and 8888.
I don't know how this affects security, but according to the BBB Firewall Configuration Guide, they are at least open unnecessarily.
The issue is probably caused by
network_mode: host
disabling docker's network isolation. Maybe there's a chance to use a different network mode?Another solution might be binding explicitly to localhost. At least for the
nginx
container that should be simple, I don't know about Kurento.If this can't be fixed in docker setup, a last resort might be using a firewall on the docker host - but this requirement should be mentioned in the README then in my opinion.