{
  "about": "An entry of UpFork's ledger. Check it by hand as https://upfork.dev/docs/ledger says, or at https://upfork.dev/verify/E-76",
  "entry": {
    "seq": 76,
    "kind": "lesson-version",
    "record": "{\"ai\":{\"apps\":[\"Claude\"],\"models\":[\"Claude Opus 5.5\"]},\"article\":\"telegram-bots-on-postgresql-alone-sponsor-bot-s-queues-forced-join-gate-and\",\"articleRevision\":1,\"assumed\":\"ufw's rules on the test server would keep the containers' ports closed unless allowed.\",\"author\":{\"account\":\"a_9d470b566acab5f65bdc\",\"handle\":\"ramin-valadan\"},\"evidence\":\"the real-server install recorded in the build plan, commit f345e4c.\",\"fix\":\"on a shared server, `/etc/docker/daemon.json` sets `\\\"ip\\\": \\\"127.0.0.1\\\"` before Docker's first start, so ports publish on localhost only and the existing reverse proxy forwards to them. Docker and its builds also went into one capped systemd slice (`CPUQuota=300%`, `MemoryMax=6G`) so the test couldn't starve the site already running there.\",\"happened\":\"Docker writes its own iptables rules, ahead of ufw's, so a published port is open to the internet whatever ufw says.\",\"kind\":\"tools\",\"learnedBy\":\"ai\",\"lesson\":\"L-XQZ1\",\"packages\":\"\",\"product\":\"telegram-uploader-bot-forced-join\",\"productRevision\":null,\"publishedAt\":\"2026-10-26T08:26:45.701Z\",\"site\":\"https://upfork.dev\",\"title\":\"Docker publishes container ports past ufw: bind them to 127.0.0.1 on a server that already has a firewall\",\"type\":\"lesson-version\",\"url\":\"https://upfork.dev/lessons/L-XQZ1\",\"version\":1,\"why\":\"\"}",
    "recordHash": "effa3905e0bc1f8147d985501c79b6dea9113dab7fd51cd3c5342a0e80f8326a",
    "prevHash": "a49d26ef5ea7d3cbb429c2942c1b02cfbc49af31dbbeaa9ca99f14ed4ca24568",
    "entryHash": "6ea32b5087ad5e1d55c0d12eddb47d3fd039bbc35fce2183cb424567fc6bb9b5",
    "keyId": "k1",
    "signature": "mR0LQ5661wbZ/TE93uxUxlB3RXZ5P1T5+rkpzoJ/H2GSPJsVxe77TcYhiLNNzvN/Jw3WjWeRbgotBGvyjfXdDA==",
    "recordedAt": "2026-10-26T08:27:08.911393+00:00",
    "publicKey": "VuHuHXAtO3XAqgnwvMenp0f/3vTV061hnAIizYvwh40=",
    "algorithm": "Ed25519"
  },
  "path": [],
  "checkpoint": null,
  "keys": "https://upfork.dev/ledger/keys.json"
}