fix: listen on 127.0.0.1 by default instead of 0.0.0.0 (DEC-731)

Matches the live edit made on ns1 (138) on 2026-10-10 (DEC-727/DEC-728) so a
redeploy does not reopen the port on all interfaces. Set FLEET_HEALTH_BIND to override
(e.g. 0.0.0.0) if a remote caller ever needs it. Callers on 138 already reach
this service over 127.0.0.1 or through Caddy.
This commit is contained in:
Grok Bot 2026-10-10 16:29:50 -04:00
commit 2d107069d8

View file

@ -122,6 +122,6 @@ const server = http.createServer(async (req, res) => {
json(404, { error: 'not found' });
});
server.listen(PORT, '0.0.0.0', () => {
server.listen(PORT, process.env.FLEET_HEALTH_BIND || '127.0.0.1', () => {
process.stdout.write(`verae-staff-session http://0.0.0.0:${PORT}/\n`);
});