yusing e0cba8f415 feat(config): opt-in flag for non-loopback local API bind ...

Validate GODOXY_LOCAL_API_ADDR before starting the unauthenticated local
API. Loopback listeners still succeed by default; addresses that bind
all interfaces, unspecified IPs, LAN hosts, or non-loopback names need
GODOXY_LOCAL_API_ALLOW_NON_LOOPBACK=true.

When that opt-in is set and the host is not loopback, log a warning so
non-local exposure is obvious. Wire common.LocalAPIAllowNonLoopback from
LOCAL_API_ALLOW_NON_LOOPBACK and document it (with a risk note) in
.env.example.

Add TestValidateLocalAPIAddr for loopback, wildcard, LAN, and hostname
cases with the allow flag on and off.

2026-04-13 12:24:52 +08:00

..

constants.go

refactor(healthcheck): streamline health check configuration and defaults

2025-12-04 15:19:10 +08:00

crypto.go

feat(socket-proxy): implement Docker socket proxy and related configurations

2025-05-10 09:47:03 +08:00

env.go

feat(config): opt-in flag for non-loopback local API bind

2026-04-13 12:24:52 +08:00