feat!: bus security default to 127.0.0.1

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ovos_messagebus"
-version = "0.3.4"
+version = "1.0.0"
 edition = "2021"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

Dockerfile

@@ -23,5 +23,8 @@ LABEL org.opencontainers.image.license="Apache-2.0"
 RUN apk add --no-cache libgcc
 # copy the binary into the final image
 COPY --from=0 /app/target/release/ovos_messagebus .
+
+# Be sure to secure this with a firewall or reverse proxy
+ENV OVOS_BUS_HOST=0.0.0.0
 # set the binary as entrypoint
 ENTRYPOINT ["/ovos_messagebus"]

README.md

@@ -59,7 +59,7 @@ OVOS_BUS_HOST=10.10.10.10 OVOS_BUS_PORT=8181 /usr/local/bin/ovos_messagebus
 
 ### Available Environment Variables
 
-- `OVOS_BUS_HOST` (default: `0.0.0.0`)
+- `OVOS_BUS_HOST` (default: `127.0.0.1`)
 - `OVOS_BUS_PORT` (default: `8181`)
 - `OVOS_BUS_CONFIG_FILE` (default: none)
 - `OVOS_BUS_MAX_MSG_SIZE` (default: `25`, in MB)
@@ -87,7 +87,7 @@ docker build -t ovos-rust-messagebus .
 To run the container:
 
 ```sh
-docker run -p 8181:8181 -e OVOS_BUS_HOST=0.0.0.0 ovos-rust-messagebus
+docker run -p 8181:8181 -e OVOS_BUS_HOST=127.0.0.1 ovos-rust-messagebus
 ```
 
 You can adjust the port mapping and environment variables as needed.

src/config.rs

@@ -36,7 +36,7 @@ impl Config {
     pub fn new() -> Self {
         // Default configuration
         let mut config = Config {
-            host: "0.0.0.0".to_string(),
+            host: "127.0.0.1".to_string(),
             port: 8181,
             route: "/core".to_string(),
             ssl: false,
@@ -121,7 +121,7 @@ mod tests {
     fn test_default_config() {
         setup_default_config_environment();
         let test_conf = Config::new();
-        assert_eq!(test_conf.host, "0.0.0.0".to_string());
+        assert_eq!(test_conf.host, "127.0.0.1".to_string());
         assert_eq!(test_conf.port, 8181);
         assert_eq!(test_conf.route, "/core".to_string());
     }