m3tam3re/nixos-config
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix(m3-hermes): add --insecure flag to dashboard for 0.0.0.0 binding

Browse Source 
The dashboard refuses to bind to non-localhost without --insecure.
Safe here because firewall restricts port 9119 to Netbird mesh (100.64.0.0/16).
This commit is contained in:
m3ta-chiron
2026-05-11 11:39:37 +02:00
parent e6f184f24a
commit 36b50e174f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/m3-hermes/services/hermes-dashboard.nix
+3 -1
View File
@@ -24,7 +24,9 @@ in {
User = "hermes"; User = "hermes";
Group = "hermes"; Group = "hermes";
ExecStart = "${hermesPkg}/bin/hermes dashboard --host 0.0.0.0 --port 9119 --no-open"; # --insecure: required to bind 0.0.0.0 (default refuses non-localhost).
# Safe because firewall restricts port 9119 to Netbird mesh only.
ExecStart = "${hermesPkg}/bin/hermes dashboard --host 0.0.0.0 --port 9119 --no-open --insecure";
# Environment matching the hermes-agent service # Environment matching the hermes-agent service
Environment = [ Environment = [