The GitHub Actions job "License Checker" on 
hertzbeat.git/fix/005-greptime-compose-port-binding has succeeded.
Run started by GitHub user Aias00 (triggered by Aias00).

Head commit for run:
b97472cb83233016dc05b4f85d60b6efc510cc52 / liuhy <[email protected]>
[fix] bind greptime compose data-store ports to localhost

The hertzbeat-postgresql-greptimedb docker-compose exposes the Postgres
and GreptimeDB data-store ports on all interfaces (0.0.0.0). Both
services run with default credentials shipped in the compose file
(POSTGRES_PASSWORD=123456, the greptime static user provider greptime=greptime),
so binding them to 0.0.0.0 lets any reachable host authenticate to the
underlying data stores with those defaults.

These ports exist only for the operator to inspect the data stores from
the host; the hertzbeat container reaches them over the internal compose
network and does not need the host mappings. Bind the host-side mappings
to 127.0.0.1 so the default-credential services are not remotely
accessible.

The hertzbeat web/collector ports (1157/1158) are intentionally left
unchanged.

Co-Authored-By: Claude <[email protected]>

Report URL: https://github.com/apache/hertzbeat/actions/runs/30366322676

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to