fix: isolate local ports and proxy trust defaults

compose.yaml

@@ -20,8 +20,8 @@ services:
       MINIO_ROOT_USER: ${S3_ACCESS_KEY:-rf4-local}
       MINIO_ROOT_PASSWORD: ${S3_SECRET_KEY:-rf4-local-secret}
     ports:
-      - "9000:9000"
-      - "9001:9001"
+      - "${RF4_BIND_ADDRESS:-127.0.0.1}:9000:9000"
+      - "${RF4_BIND_ADDRESS:-127.0.0.1}:9001:9001"
     healthcheck:
       test: ["CMD", "curl", "-fsS", "http://localhost:9000/minio/health/live"]
       interval: 5s
@@ -75,7 +75,7 @@ services:
       minio-init:
         condition: service_completed_successfully
     ports:
-      - "8000:8000"
+      - "${RF4_BIND_ADDRESS:-127.0.0.1}:8000:8000"
     healthcheck:
       test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/ready')"]
       interval: 5s
@@ -104,7 +104,7 @@ services:
       api:
         condition: service_healthy
     ports:
-      - "4321:4321"
+      - "${RF4_BIND_ADDRESS:-127.0.0.1}:4321:4321"
     healthcheck:
       test: ["CMD", "node", "-e", "fetch('http://localhost:4321').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
       interval: 5s