zeekay 289259ab58 security(zap): the unauthenticated listener is off unless asked for ...

It reaches the same DocumentDB pool the authenticated MongoDB port does,
authenticates nothing and encrypts nothing, so the port was the whole of the
access control and it was open by default on every interface while
--listen-addr sat on loopback with --auth on.

--listen-zap-addr is now the only input: default "-", no ZAP_PORT, no
ZAP_DISABLED, no Config.Enabled deciding a second time what setup.go had
already decided. A host in the address is refused rather than dropped -- it
used to read as bound and answer as open.

Honoring a host needs a bind address in luxfi/zap's NodeConfig, and encrypting
the transport needs its TLS field filled. Both are upstream work in that
package and are not attempted here.

2026-08-27 17:13:23 -07:00

..

setup.go

security(zap): the unauthenticated listener is off unless asked for

2026-08-27 17:13:23 -07:00