From f430a3128de851ba045a723a15ed809dce8b14e7 Mon Sep 17 00:00:00 2001 From: sanjio3 <2433877589@qq.com> Date: Wed, 16 Sep 2026 01:21:53 +0800 Subject: [PATCH] fix(config): bind metrics port to loopback by default (#1449) Signed-off-by: sanjio3 <2433877589@qq.com> --- cmd/api/src/config/default.go | 2 +- cmd/api/src/config/default_test.go | 7 +++++++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/cmd/api/src/config/default.go b/cmd/api/src/config/default.go index 77d282219270..f5556645e281 100644 --- a/cmd/api/src/config/default.go +++ b/cmd/api/src/config/default.go @@ -64,7 +64,7 @@ func NewDefaultConfiguration() (Configuration, error) { SlowQueryThreshold: 100, // Threshold in ms for caching queries MaxGraphQueryCacheSize: 100, // Number of cache items for graph queries MaxAPICacheSize: 200, // Number of cache items for API utilities - MetricsPort: ":2112", + MetricsPort: "127.0.0.1:2112", RootURL: serde.MustParseURL("http://localhost"), WorkDir: "/opt/bhe/work", LogLevel: "INFO", diff --git a/cmd/api/src/config/default_test.go b/cmd/api/src/config/default_test.go index f59a5a1188bf..84ae90c6b9a2 100644 --- a/cmd/api/src/config/default_test.go +++ b/cmd/api/src/config/default_test.go @@ -28,3 +28,10 @@ func TestNewDefaultConfig(t *testing.T) { require.Nilf(t, err, "Failed to create default configuration: %v", err) require.NotEmpty(t, cfg.Crypto.JWT.SigningKey, "Signing key should not be empty") } + +func TestNewDefaultConfig_BindsLoopback(t *testing.T) { + cfg, err := config.NewDefaultConfiguration() + require.Nilf(t, err, "Failed to create default configuration: %v", err) + require.Equal(t, "127.0.0.1", cfg.BindAddress, "API bind address should default to loopback") + require.Equal(t, "127.0.0.1:2112", cfg.MetricsPort, "Metrics port should default to loopback") +}