feat: Restrict docker compose port bindings to 127.0.0.1

[kingston]

Summary by CodeRabbit

Release Notes

• New Features

  • User profiles now support storing and updating phone numbers through the user update mutation.

• Chores

  • Docker Compose services for example applications and core generators have been updated. PostgreSQL and Redis services now bind to localhost (127.0.0.1) instead of all network interfaces.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 81acd5cf-dcc2-4bb4-b011-27e779baacbd

📥 Commits

Reviewing files that changed from the base of the PR and between 7031c74 and 03f652c.

⛔ Files ignored due to path filters (2)

• examples/blog-with-auth/baseplate/generated/docker/docker-compose.yml is excluded by !**/generated/**, !**/generated/**
• examples/todo-with-better-auth/baseplate/generated/docker/docker-compose.yml is excluded by !**/generated/**, !**/generated/**

📒 Files selected for processing (7)

• .changeset/restrict-docker-ports.md
• examples/blog-with-auth/apps/admin/src/gql/graphql.ts
• examples/blog-with-auth/apps/backend/schema.graphql
• examples/blog-with-auth/docker/docker-compose.yml
• examples/todo-with-better-auth/docker/docker-compose.yml
• packages/core-generators/src/generators/docker/docker-compose/postgres.ts
• packages/core-generators/src/generators/docker/docker-compose/redis.ts

---

📝 Walkthrough

Walkthrough

Added optional phone field to GraphQL UpdateUserData input type and restricted Docker Compose port bindings for Postgres and Redis services to 127.0.0.1 across core generators and example projects to prevent exposure to the local network.

Changes

Cohort / File(s)	Summary
Docker Compose Port Restrictions .changeset/restrict-docker-ports.md, packages/core-generators/src/generators/docker/docker-compose/postgres.ts, packages/core-generators/src/generators/docker/docker-compose/redis.ts, examples/blog-with-auth/docker/docker-compose.yml, examples/todo-with-better-auth/docker/docker-compose.yml	Updated Docker Compose port mappings to bind published ports to loopback interface (127.0.0.1) instead of all network interfaces for Postgres and Redis services.
GraphQL Schema Update examples/blog-with-auth/apps/backend/schema.graphql, examples/blog-with-auth/apps/admin/src/gql/graphql.ts	Extended UpdateUserData input type with optional phone: String field alongside existing email, emailVerified, and name fields.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

• feat: Upgrade docker compose Postgres + Redis #602: Modifies the same Docker Compose generators for Postgres and Redis in packages/core-generators, introducing potential conflicts or complementary configuration changes.

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: restricting Docker Compose port bindings to 127.0.0.1 loopback interface across multiple files and generators.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch kingston/eng-1150-restrict-docker-compose-ports-to-127001

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[changeset-bot]

🦋 Changeset detected

Latest commit: 03f652c

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 24 packages

Name	Type
@baseplate-dev/core-generators	Patch
@baseplate-dev/fastify-generators	Patch
@baseplate-dev/project-builder-server	Patch
@baseplate-dev/react-generators	Patch
@baseplate-dev/plugin-ai	Patch
@baseplate-dev/plugin-auth	Patch
@baseplate-dev/plugin-email	Patch
@baseplate-dev/plugin-observability	Patch
@baseplate-dev/plugin-payments	Patch
@baseplate-dev/plugin-queue	Patch
@baseplate-dev/plugin-rate-limit	Patch
@baseplate-dev/plugin-storage	Patch
@baseplate-dev/create-project	Patch
@baseplate-dev/project-builder-cli	Patch
@baseplate-dev/project-builder-common	Patch
@baseplate-dev/project-builder-dev	Patch
@baseplate-dev/project-builder-web	Patch
@baseplate-dev/project-builder-test	Patch
@baseplate-dev/code-morph	Patch
@baseplate-dev/project-builder-lib	Patch
@baseplate-dev/sync	Patch
@baseplate-dev/tools	Patch
@baseplate-dev/ui-components	Patch
@baseplate-dev/utils	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR