fix(ci): route smoke through Docker gateway (#1)

2026-07-17 01:29:30 +02:00
parent 8d98d888b3
commit 1bca034a52
5 changed files with 17 additions and 6 deletions
@@ -49,7 +49,9 @@ Compose, then point `RENDEZVOUS_SMOKE_HTTP_URL` and
 and production-advertised service ports remain 8080/9050. Sibling-container CI
 runners may also set `RENDEZVOUS_CONFIG_SOURCE` and
 `RENDEZVOUS_SECRET_SOURCE` to host-visible absolute bind-source paths; local
-operators should normally keep the checked-in relative defaults.
+operators should normally keep the checked-in relative defaults. Those runners
+may set `RENDEZVOUS_HTTP_BIND_ADDRESS=0.0.0.0` and target their Docker host
+gateway; do not widen the default loopback HTTP binding on an ordinary host.

 `deploy/compose/appsettings.Production.json` is a local/private-bridge smoke
 profile, not an Internet template: TCP is published only on host loopback, the