From edcac8976a3402e2adc6c1e2b8cc4ea78f80266d Mon Sep 17 00:00:00 2001
From: Trent Maetzold <trent@maetzold.co>
Date: Wed, 11 Mar 2026 11:47:32 -0500
Subject: [PATCH] security: bind to localhost, use GHCR image

---
 docker-compose.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index fa91e7d..4cadb84 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,10 +2,10 @@ version: '2.1'
 
 services:
   protonmail-bridge:
-    image: shenxn/protonmail-bridge
+    image: ghcr.io/trent-maetzold/protonmail-bridge:build
     ports:
-      - 1025:25/tcp
-      - 1143:143/tcp
+      - 127.0.0.1:1025:25/tcp
+      - 127.0.0.1:1143:143/tcp
     restart: unless-stopped
     volumes:
       - protonmail:/root