Gate non-loopback remote binds

2026-06-14 09:10:09 -04:00
parent fb5c25ea0b
commit 6c14d669b8
3 changed files with 28 additions and 4 deletions
@@ -33,6 +33,8 @@ pub struct ServerConfig {
    #[serde(default)]
    pub allow_remote_forwarding: bool,
    #[serde(default)]
+    pub allow_remote_non_loopback_bind: bool,
+    #[serde(default)]
    pub allow_agent_forwarding: bool,
    #[serde(default = "default_accept_env")]
    pub accept_env: Vec<String>,
@@ -61,6 +63,7 @@ impl Default for ServerConfig {
            native_auth_rate_limit_per_minute: default_native_auth_rate_limit_per_minute(),
            allow_tcp_forwarding: true,
            allow_remote_forwarding: false,
+            allow_remote_non_loopback_bind: false,
            allow_agent_forwarding: false,
            accept_env: default_accept_env(),
        }