fix: move haproxy stats ports back onto nonroot range internally

ORCID · Feb 19, 2025 · 56ecb59 · 56ecb59
1 parent d089d75
commit 56ecb59
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 5 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -50,7 +50,7 @@ services:
       - orcid-haprouter/default.env
       - orcid-haprouter/deployment.env
     ports:
-      - 0.0.0.0:678:789 # stats
+      - 0.0.0.0:678:1936 # stats
       - 0.0.0.0:7983:7983 # solr read
       - 0.0.0.0:6983:6983 # solr write
       - 0.0.0.0:7432:7432 # postgres read
@@ -67,7 +67,7 @@ services:
       context: .
       dockerfile: orcid-lb/Dockerfile
     ports:
-      - 0.0.0.0:891:789 # stats
+      - 0.0.0.0:891:1936 # stats
       - 0.0.0.0:80:80
       - 0.0.0.0:443:443
     networks:

diff --git a/orcid-haprouter/haproxy.cfg b/orcid-haprouter/haproxy.cfg
@@ -53,7 +53,8 @@ defaults
   stats show-modules
   stats show-legends
 
-listen stats-789
+# haproxy in docker runs as non root so even admin ports must be > 1024
+listen stats-1936
   description haproute Loadbalancer
   bind 0.0.0.0:789
   mode http

diff --git a/orcid-lb/haproxy.cfg b/orcid-lb/haproxy.cfg
@@ -34,9 +34,10 @@ defaults
   stats show-modules
   stats show-legends
 
-listen stats-789
+# haproxy in docker runs as non root so even admin ports must be > 1024
+listen stats-1936
   description haproute Loadbalancer
-  bind 0.0.0.0:789
+  bind 0.0.0.0:1936
   mode http
   stats enable
   stats uri /