c3a41505b7
The current uWSGI Upstart script starts the stats server listening on all IPs. In order to reduce the attack surface, this patch modifies the Upstart script so that the stats server starts listening on localhost only. Closes-Bug: #1288881 Change-Id: I6141e665433d418b8cbecc4f065b8a3710310d29
11 lines
334 B
Plaintext
11 lines
334 B
Plaintext
# Barbican upstart script
|
|
# Used in deb build. Keep in sync with etc/init/barbican-api.conf
|
|
|
|
description "Barbican Key Management APIs"
|
|
start on runlevel [2345]
|
|
stop on runlevel [06]
|
|
|
|
script
|
|
uwsgi --master --die-on-term --emperor /etc/barbican/vassals --logto /var/log/barbican/barbican-api.log --stats localhost:9314
|
|
end script
|