From f3989dde3d037ccb7f338fa7022100e151692e0a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=92=D0=B8=D0=BA=D1=82=D0=BE=D1=80?=
 <78488229+viktor138irk@users.noreply.github.com>
Date: Sat, 9 May 2026 15:32:32 +0900
Subject: [PATCH] =?UTF-8?q?=D0=A1=D0=B4=D0=B5=D0=BB=D0=B0=D0=BD=20=D0=BD?=
 =?UTF-8?q?=D0=B0=D1=81=D1=82=D1=80=D0=B0=D0=B8=D0=B2=D0=B0=D0=B5=D0=BC?=
 =?UTF-8?q?=D1=8B=D0=B9=20bind=20Matrix=20endpoint?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker-compose.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 3e61f38..97e2f09 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -25,7 +25,10 @@ services:
     volumes:
       - /opt/swchat/data/synapse:/data
     ports:
-      - '127.0.0.1:8008:8008'
+      # Default is localhost-only for single-server/local checks.
+      # For FastPanel reverse proxy over private LAN set MATRIX_BIND_HOST=192.168.0.141 in /opt/swchat/.env
+      # and restrict access with scripts/firewall_private_proxy.sh.
+      - '${MATRIX_BIND_HOST:-127.0.0.1}:8008:8008'
     networks:
       - swchat