fix: bind to 127.0.0.1 (HOST-overridable) to avoid tailscale :9963 EADDRINUSE

73292274fb598a0603a96bff9895c9f1295fb581 · 2026-07-09 19:07:28 -0700 · Steve

Files touched

M server.js

Diff

commit 73292274fb598a0603a96bff9895c9f1295fb581
Author: Steve <steve@designerwallcoverings.com>
Date:   Thu Jul 9 19:07:28 2026 -0700

    fix: bind to 127.0.0.1 (HOST-overridable) to avoid tailscale :9963 EADDRINUSE
---
 server.js | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/server.js b/server.js
index 9bffcf5..861cd23 100644
--- a/server.js
+++ b/server.js
@@ -1139,7 +1139,11 @@ app.post('/api/action/vendor-url', async (req, res) => {
   }
 })();
 
-app.listen(PORT, () => {
-  console.log(`SKU Check Skill running on port ${PORT}`);
-  console.log(`Dashboard: http://45.61.58.125:${PORT}`);
+// Bind to localhost by default: on Kamatera this port is fronted by `tailscale
+// serve` (TS-IP:9963 -> localhost:9963), so a wildcard bind collides with
+// tailscaled and also needlessly exposes this admin dashboard on the public
+// interface. Override with HOST=0.0.0.0 for a truly public bind.
+const HOST = process.env.HOST || '127.0.0.1';
+app.listen(PORT, HOST, () => {
+  console.log(`SKU Check Skill running on ${HOST}:${PORT}`);
 });

← 1c12bfb fix: read GEMINI_API_KEY from process.env instead of literal · back to Sku Check Skill · auto-save: 2026-07-09T20:42:07 (1 files) — .gitignore df9809b →