Commit fa432b26 authored by Nicolas Wavrant's avatar Nicolas Wavrant

slaprunner: shellinabox now only listens to localhost.

It is reachable through the reverse proxy only
parent db3f076a
...@@ -452,7 +452,7 @@ context = ...@@ -452,7 +452,7 @@ context =
[shellinabox] [shellinabox]
recipe = slapos.cookbook:shellinabox recipe = slapos.cookbook:shellinabox
ipv6 = $${slap-network-information:global-ipv6} ipv6 = ::1
port = 8080 port = 8080
shell = $${shell:wrapper} shell = $${shell:wrapper}
wrapper = $${buildout:directory}/bin/shellinaboxd wrapper = $${buildout:directory}/bin/shellinaboxd
......
...@@ -67,7 +67,7 @@ http { ...@@ -67,7 +67,7 @@ http {
proxy_set_header X-Forwarded-Host $http_host; proxy_set_header X-Forwarded-Host $http_host;
} }
location /shellinabox { location /shellinabox {
proxy_pass http://{{ param_nginx_frontend['global-ip'] }}:{{ shellinabox_port }}/; proxy_pass http://[::1]:{{ shellinabox_port }}/;
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504; proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
proxy_redirect off; proxy_redirect off;
proxy_buffering off; proxy_buffering off;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment