Repository navigation
security(core): serve only the /go links on the tools server's port - #166
Merged
Merged
Conversation
In port mode the tools server's published port (42000) is bound to all interfaces and answered document search, photo search, container logs and server status without authentication. Docker's port forwarding gives every request through that port the same source address, so the server could not tell this Mac from any other device on the network. The server now listens twice: - an internal listener (8000), never published, which serves everything to the stack's own containers; Open WebUI's tool calls keep using it unchanged - the published listener (8001, still reached as 42000), which serves the `/go` links and answers every other path with 404 Caddy forwards the `/go` links to the published listener. Upgrade: run `./stack restart core` to apply.
The rows added with the tools server fix read as sentences and named a path instead of a service. They now follow the tables: the service, with a qualifier in parentheses.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
/golinks there, and every other path answers 404.Upgrade: run
./stack restart coreto apply.