| commit | e9413de660db4e832839b90582864c8f4091295e | [log] [tgz] |
|---|---|---|
| author | Piotr Dobrowolski <informatic@hackerspace.pl> | Sun Dec 03 18:34:16 2023 +0100 |
| committer | informatic <informatic@hackerspace.pl> | Thu Dec 28 18:47:28 2023 +0000 |
| tree | cea89068a81a260c6fca82491023b8c487d9ebfc | |
| parent | ed5c5fce421791e629b5983f82b269b2fa4a7a77 [diff] |
hswaw/paperless: listen on 127.0.0.1 only This prevents authentication bypass from users on pod network/boston-packets. Unfortunate. Change-Id: I410dabff507b2f25298db09e99b6d628d76292b9 Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1816 Reviewed-by: radex <radex@hackerspace.pl>
diff --git a/hswaw/paperless/paperless.libsonnet b/hswaw/paperless/paperless.libsonnet index 2605d37..c24f264 100644 --- a/hswaw/paperless/paperless.libsonnet +++ b/hswaw/paperless/paperless.libsonnet
@@ -136,6 +136,7 @@ }, env_: { PAPERLESS_PORT: "8000", + PAPERLESS_BIND_ADDR: "127.0.0.1", PAPERLESS_URL: "https://%s" % [cfg.domain], PAPERLESS_SECRET_KEY: top.secretRefs.secret_key,