archetech / archon / 34788118355

87%

push

github

fix(compose): Bind RTL, Grafana, and LNbits admin UIs to loopback (#1139)

* fix(compose): Bind the admin UIs to loopback by default

RTL, Grafana, and the LNbits admin UI published with a short PORT:PORT
form, which binds 0.0.0.0. Docker inserts its publish rules ahead of the
host firewall, so an operator whose UFW allows only 22/80/443 still had
three admin UIs on the public internet -- a credential-stuffing flood
against RTL on 4tress.org is what surfaced it (#1138).

Each now binds 127.0.0.1 by default with an ARCHON_*_BIND override, so a
reverse proxy or SSH tunnel works unchanged and public exposure is a
deliberate 0.0.0.0. LNbits was not in the report and is the worst of the
three -- it is the custodial wallet backend with LNBITS_ADMIN_UI=true.

Scope is the admin UIs only. The user-facing UIs (explorer, react-wallet,
the *-client apps) publish on 0.0.0.0 too, but they are meant to be
reached and defaulting them to loopback is a behaviour change; the
in-network API ports (gatekeeper, lightning-mediator) are a separate
question. Both left for a deliberate pass.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GYGMfX3foBcVqP7AQNXjWj

* docs(compose): Trim the bind comments to the fact and the lever

Dropped "worse than RTL" (a comparison to another line in the same
change, not something the lnbits line documents) and the SSH-tunnel /
reverse-proxy / tailnet how-to, which sample.env already carries. Each
now states why it is loopback and the one env var that changes it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GYGMfX3foBcVqP7AQNXjWj

* docs(deployment): Reflect the loopback admin-UI defaults in the port table

The port reference is where an operator checks exposure. Its RTL and
LNbits rows already claimed "localhost" while both actually published on
0.0.0.0 -- aspirational until this change, now true -- and listed only the
_POR... (continued)

4169 of 4792 branches covered (87.0%)

Branch coverage included in aggregate %.

8808 of 9246 relevant lines covered (95.26%)

773.48 hits per line