Package: victoria-metrics Version: 1.79.5+ds1-2+b5 Severity: normal Tags: patch X-Debbugs-Cc: [email protected]
Dear Maintainer, After installation port 8428 is open (check with nmap) from outside because by default VictoriaMetrics listens on 0.0.0.0 instead of 127.0.0.1. The service is enabled after installation, which leaves the port open to the outside world with write and read access to the VictoriaMetrics database. Enforcing the address to 127.0.0.1 ensures one needs a tunnel for instance to write and read data after installation. See attached configuration file that addresses that. Best regards, Valérian Sibille -- System Information: Debian Release: 12.11 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: arm64 (aarch64) Kernel: Linux 6.1.0-37-arm64 (SMP w/2 CPU threads) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages victoria-metrics depends on: ii adduser 3.134 ii init-system-helpers 1.65.2 ii libc6 2.36-9+deb12u10 ii libzstd1 1.5.4+dfsg2-5 victoria-metrics recommends no packages. victoria-metrics suggests no packages. -- Configuration Files: /etc/default/victoria-metrics changed: ARGS="-storageDataPath=/var/lib/victoria-metrics -httpListenAddr=127.0.0.1:8428" -- no debconf information
