9
2
Fork
You've already forked platform
2

Steve only forwards to apps on port 8083 #272

Closed
opened 2026年06月08日 11:19:36 +02:00 by vkobel · 3 comments

Steve has the app upstream hardcoded to 127.0.0.1:8083.

That means when e2e: true is enabled, traffic goes:

Caddy -> STEVE :49500 -> app :8083

even if the app’s Procfile says something else like:

ports:3000http_port:3000e2e:true

So any e2e app that doesn’t listen on 8083 just fails behind steve, usually as some vague upstream/proxy error. This is confusing because the docs/config imply the app can use any unreserved port and http_port should define the HTTP app port.

I think steve should take its app upstream from config/env, e.g. STEVE_APP_UPSTREAM, and the enclave startup should set that from the app’s http_port. 8083 can stay as a fallback for compatibility, but it shouldn’t be the only working app port.

[Steve](https://git.distrust.co/public/steve) has the app upstream hardcoded to `127.0.0.1:8083`. That means when `e2e: true` is enabled, traffic goes: ```text Caddy -> STEVE :49500 -> app :8083 ``` even if the app’s `Procfile` says something else like: ```yaml ports: 3000 http_port: 3000 e2e: true ``` So any e2e app that doesn’t listen on `8083` just fails behind steve, usually as some vague upstream/proxy error. This is confusing because the docs/config imply the app can use any unreserved port and `http_port` should define the HTTP app port. I think steve should take its app upstream from config/env, e.g. `STEVE_APP_UPSTREAM`, and the enclave startup should set that from the app’s `http_port`. `8083` can stay as a fallback for compatibility, but it shouldn’t be the only working app port.
Author
Owner
Copy link

Attempt to fix this (not tested):

Attempt to fix this (not tested): - https://codeberg.org/caution/platform/pulls/271 - https://codeberg.org/vkobel/steve-e2e-enclave-channel/pulls/2

Needs testing

Needs testing

This should be done. The PR is merged on steve and platform.

This should be done. The PR is merged on steve and platform.
Sign in to join this conversation.
No Branch/Tag specified
main
feat/issue-377-minimal-sentry
fix/issue-191-attestation-endpoint-copy
anton/feat/multi-user
feat/legal-publish-doc
fix/issue-119-logout-confirmation
fix/paddle-customdata-credit-mint
fix/issue-116-duplicate-ssh-key
fix/issue-265-http-port-private
fix/issue-330-remove-build-binary
feat/paddle-byoc-subscriptions
fix/issue-307-remove-apps
feat/issue-164-account-id
feat/add-tofu-lockfile-cache
feat/webauthn-discoverable-login
docs/issue-339-install-instructions
fix/issue-336-split-qr-login-tokens
fix/verify-app-source-preflight
fix/many-git-push-deploy
fix/issue-334-email-verification-throttle
fix/issue-273-billing-url
fix/issue-333-final-usage-collection
fix/issue-270-low-credit-email
fix/issue-301-remove-auto-topup
fix/issue-320-byoc-auth-first
fix/issue-348-git-progress-checklist
fix/issue-321-byoc-caution-hcl
fix/issue-332-resource-id-suspension
fix/eif-app-mode-normalization
feat/cli-stagex-container
fix/eif-s3-layer-cache
fix/authz-role-checks
fix/cli-hangs-unsupported-ssh-url
feat/print-platform-commit-dashboard
fix/config-domain-validation
anton/support-ssh-destroy-get
fix/cli-config-dir
feat/publish-build-inputs
feat/locksmith-polishing
fix/procfile-run-command-no-split
anton/byoc-require-login
fix/hcl-init-template
feat/egress-default-deny
ryansquared/hcl
quotas
anton/feat/region-routing-resource-unavailable-alert
fix/attestation-502-dashboard
ryansquared/systemdize
fix/verify-git-credential-hang
anton/fix-low-credits-alert
xenushka/rename-byoc
ryansquared/add-download-eif
add-debug-flag
test/pr1-integration-harness
anton/fix/only-pass-required-env-vars
ryansquared/add-database-bucket
No results found.
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
Component/Enclave-Builder
This issue affects Enclave Builder (git-push and CLI)
Component/Infrastructure
This issue affects generic Caution hosted infra components
Deploy/BYOC
Relates to Caution Bring-your-own-compute
Deploy/Full-managed
Relates to Caution fully managed cloud
Deploy/Self-hosted
Relates to Caution deployed on self-hosted infra
Interface/API
This issue affects the API
Interface/CLI
This issue affects the command line interface
Interface/Git
This issue affects the Git `push` interface
Interface/Web
This issue affects the web dashboard
Kind/Bug
Something is not working
Kind/Documentation
Documentation changes
Kind/Enhancement
Improve existing functionality
Kind/Feature
New functionality
Kind/Security
This is security issue
Kind/Testing
Issue or pull request related to testing
Priority
Critical
The priority is critical
Priority
High
The priority is high
Priority
Low
The priority is low
Priority
Medium
The priority is medium
Reviewed
Confirmed
Issue has been confirmed
Reviewed
Duplicate
This issue or pull request already exists
Reviewed
Invalid
Invalid issue
Reviewed
Won't Fix
This issue won't be fixed
Status
Abandoned
Somebody has started to work on this but abandoned work
Status
Blocked
Something is blocking this issue or pull request
Status
Need More Info
Feedback is required to reproduce issue or to continue work
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
caution/platform#272
Reference in a new issue
caution/platform
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?