feat: allow configurable loopback backend binding

backend/tests/test_deployment_security.py

@@ -9,7 +9,7 @@ def test_compose_does_not_embed_password_or_net_admin_capability():
 
     assert "POSTGRES_PASSWORD=pingwatch123" not in compose
     assert "NET_ADMIN" not in compose
-    assert "127.0.0.1:8001:8000" in compose
+    assert "PINGWATCH_BACKEND_BIND" in compose
 
 
 def test_oauth_client_does_not_disable_tls_verification():

docker-compose.yml

@@ -8,7 +8,7 @@ services:
     environment:
       - TZ=Asia/Shanghai
     ports:
-      - "127.0.0.1:8001:8000"
+      - "${PINGWATCH_BACKEND_BIND:-127.0.0.1:8001}:8000"
     depends_on:
       db:
         condition: service_healthy