update

docker-compose.yml

@@ -6,16 +6,19 @@
 #   2. Start with GPU: ./start-with-gpu.sh
 #   Or manually: docker-compose -f docker-compose.yml -f docker-compose.gpu.yml up -d
 #
+# Security:
+#   Ollama service is internal-only (no ports exposed to host)
+#   Only accessible by other Docker Compose services
+#
 # See docs/OLLAMA_SETUP.md for detailed setup instructions
 
 services:
-  # Ollama AI Service
+  # Ollama AI Service (Internal only - not exposed to host)
   ollama:
     image: ollama/ollama:latest
     container_name: munich-news-ollama
     restart: unless-stopped
-    ports:
-      - "11434:11434"
+    # No ports exposed - only accessible within Docker network
     volumes:
       - ollama_data:/root/.ollama
     networks: