sync: update from private repo (ddadfd71)

docker-compose.yml

@@ -11,8 +11,15 @@ services:
     # pool work. Harmless when display_mode is headless.
     shm_size: "1gb"
     ports:
-      # Auth is optional, so keep the default deployment local-only.
-      - "127.0.0.1:9876:9876"
+      # Published on ALL host interfaces so a Docker host is reachable from your
+      # LAN out of the box (the common case for a headless server). This means a
+      # fresh instance is exposed: the agent API includes the Bash tool, so an
+      # UNAUTHENTICATED instance on the network is effectively remote code
+      # execution. Before leaving it up on a shared/untrusted network, enable
+      # auth (`auth` in config.yaml), `safety.bash_sandbox: always`, and TLS —
+      # see docs/docker.md "Going beyond localhost". To keep it local-only
+      # instead, change this to "127.0.0.1:9876:9876".
+      - "9876:9876"
     extra_hosts:
       - "host.docker.internal:host-gateway"
     # .env is optional: a bare `docker compose up --build` works with zero setup.