[bojemoi_boot] fix(security): remove dnsmasq webproc port 8080 from public ingress

Commit e2761e1

Description

Port 8080 (webproc admin UI) was published directly, accessible from any container on the backend/overlay networks. A compromised container could rewrite dnsmasq config to redirect internal domains.

Admin UI remains accessible via Traefik at dnsmasq.bojemoi.lab (HTTPS). Port 53 (DNS resolution) unchanged.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

Diff Summary