From 30fcd00be4ca4d4843f6debc79848376bb372b81 Mon Sep 17 00:00:00 2001 From: Hunt Xu Date: Thu, 12 Jul 2018 16:00:26 +0800 Subject: [PATCH] python2-runtime: limit cglimit listen on localhost only It doesn't make sense to expose the cglimit API to the outside as it is only accessed locally. Limiting it only listen on localhost prevents access from the outside and thus improves the security. Change-Id: I941b7f8c33e5a631bef18df6667423c5bbdbf779 --- runtimes/python2/custom-entrypoint.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/runtimes/python2/custom-entrypoint.sh b/runtimes/python2/custom-entrypoint.sh index fa310a39..f0404fb7 100644 --- a/runtimes/python2/custom-entrypoint.sh +++ b/runtimes/python2/custom-entrypoint.sh @@ -3,4 +3,4 @@ uwsgi --http :9090 --uid qinling --wsgi-file server.py --callable app --master --processes 5 --threads 1 & -uwsgi --http :9092 --uid root --wsgi-file cglimit.py --callable app --master --processes 1 --threads 1 +uwsgi --http 127.0.0.1:9092 --uid root --wsgi-file cglimit.py --callable app --master --processes 1 --threads 1