fix: listen on 127.0.0.1 by default instead of 0.0.0.0 (DEC-731)

Matches the live edit made on ns1 (138) on 2026-10-10 (DEC-727/DEC-728) so a
redeploy does not reopen the port on all interfaces. Set FLEET_HEALTH_BIND to override
(e.g. 0.0.0.0) if a remote caller ever needs it. Callers on 138 already reach
this service over 127.0.0.1 or through Caddy.
This commit is contained in:
Grok Bot 2026-10-10 16:29:33 -04:00
commit e768a12a70

View file

@ -54,6 +54,6 @@ const server = http.createServer(async (req, res) => {
}
});
server.listen(PORT, '0.0.0.0', () => {
server.listen(PORT, process.env.FLEET_HEALTH_BIND || '127.0.0.1', () => {
process.stdout.write(`verae-access-api http://0.0.0.0:${PORT}/ plane=${PLANE}\n`);
});