fix: bind credential proxy to docker0 interface on Linux

Proxy was binding to 127.0.0.1 which is unreachable from Docker
containers. Now uses PROXY_BIND_HOST (detects docker0 IP on Linux)
so containers can reach the proxy via host.docker.internal.
This commit is contained in:
Eyejoker
2026-03-29 23:56:46 +09:00
parent 6036fd988b
commit 382c9f49d4

View File

@@ -85,7 +85,7 @@ import {
} from './service-routing.js';
import { FAILOVER_MIN_DURATION_MS } from './config.js';
import { startCredentialProxy } from './credential-proxy.js';
import { cleanupOrphans } from './container-runtime.js';
import { cleanupOrphans, PROXY_BIND_HOST } from './container-runtime.js';
// Token rotation is initialized lazily on first use or at startup below
@@ -323,7 +323,7 @@ async function main(): Promise<void> {
initCodexTokenRotation();
// Start credential proxy for container isolation and clean up orphaned containers
startCredentialProxy(CREDENTIAL_PROXY_PORT).catch((err) =>
startCredentialProxy(CREDENTIAL_PROXY_PORT, PROXY_BIND_HOST).catch((err) =>
logger.warn(
{ err },
'Failed to start credential proxy (may already be running)',