bind docker compose services to localhost

[devkral]

We don't want to expose the dev services to public

Note: firewalls doesn't block access because docker overwrites the firewall settings