update

docker-compose.yml

@@ -7,8 +7,11 @@
 #   Or manually: docker-compose -f docker-compose.yml -f docker-compose.gpu.yml up -d
 #
 # Security:
-#   Ollama service is internal-only (no ports exposed to host)
-#   Only accessible by other Docker Compose services
+#   - Only Backend API (port 5001) is exposed to host
+#   - MongoDB is internal-only (not exposed to host)
+#   - Ollama is internal-only (not exposed to host)
+#   - Crawler and Sender are internal-only
+#   All services communicate via internal Docker network
 #
 # See docs/OLLAMA_SETUP.md for detailed setup instructions
 
@@ -59,13 +62,12 @@ services:
       "
     restart: "no"
 
-  # MongoDB Database
+  # MongoDB Database (Internal only - not exposed to host)
   mongodb:
     image: mongo:latest
     container_name: munich-news-mongodb
     restart: unless-stopped
-    ports:
-      - "27017:27017"
+    # No ports exposed - only accessible within Docker network
     environment:
       # For production, set MONGO_PASSWORD environment variable
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_USERNAME:-admin}