Unable to disable port 5984 when using SSL / https
- Dominant language
- Erlang
- Stars
- 7k
- Forks
- 1.1k
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 9
Description
## Description
It should be possible to configure CouchDB to serve documents only over an SSL port (default: 6984) and not the insecure http port (defautl: 5984).
## Steps to Reproduce
_n/a_
## Expected Behaviour
CouchDB only binds to port 6984 with the httpsd daemon.
## Your Environment
* CouchDB Version used: `master`
## Additional context
This is a common request, and something we lost when we made security settings changes in 2.3.1, since it is no longer possible to disable the daemon via `[daemons]`.
Contributor guide
Research direction
Start by tracing how the [daemons] configuration and the httpd and httpsd entry points are handled after the 2.3.1 security settings changes. Check the existing configuration and daemon tests before determining how disabling the insecure daemon should be represented. Done means CouchDB binds only to the configured SSL port while the HTTP port remains disabled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- erlang
- Domain
- backend, databases, networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100