From dbc82be9de4860ff0c937595ec7bc1684d1bd9cb Mon Sep 17 00:00:00 2001
From: Robbie Ferguson <contact@category5.tv>
Date: Mon, 26 Aug 2019 11:06:31 -0400
Subject: [PATCH] Only expose 80/443

---
 build/160-docker                  | 3 +++
 notes/docker/stages/01/Dockerfile | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/build/160-docker b/build/160-docker
index 40f43bf..a941d21 100755
--- a/build/160-docker
+++ b/build/160-docker
@@ -12,4 +12,7 @@ if (( $platform == 21 )); then
     echo "PATCH-000002" >> /var/log/nems/patches.log
   fi
 
+  # Enable services that may not have been enabled automatically during build
+  systemctl enable monit
+
 fi
diff --git a/notes/docker/stages/01/Dockerfile b/notes/docker/stages/01/Dockerfile
index cf66f36..81039ca 100644
--- a/notes/docker/stages/01/Dockerfile
+++ b/notes/docker/stages/01/Dockerfile
@@ -37,6 +37,6 @@ RUN wget --no-check-certificate -O /tmp/nems-prep.sh https://raw.githubuserconte
     chmod +x /tmp/nems-prep.sh && \
     /tmp/nems-prep.sh
 
-EXPOSE 22/tcp 80/tcp 443/tcp 2812/tcp 9090/tcp
+EXPOSE 80/tcp 443/tcp
 
 ENTRYPOINT ["/usr/bin/systemctl","default","--init"]