All ports bound on localhost interface only.

docker-compose.yml

@@ -4,7 +4,7 @@ services:
     image: prom/prometheus
     restart: always
     ports:
-      - 9089:9090
+      - 127.0.0.1:9089:9090
     environment:
       - config.file=/etc/prometheus/prometheus.yml
       - storage.tsdb.path=/prometheus
@@ -33,7 +33,7 @@ services:
     image: grafana/grafana
     restart: always
     ports:
-      - 3000:3000
+      - 127.0.0.1:3000:3000
     volumes:
       - ./grafana.ini:/etc/grafana/grafana.ini
       - graf-data:/var/lib/grafana