Ilker ManapandClaude Opus 5.5 c0421bc7ee Guard the admin API and pprof with a token only root and the server can read ...

The admin listener answered any local process: models added, nodes
upgraded, engine keys listed, the heap dumped. /api and /debug now demand
the token the server writes 0600 to its state directory on first start;
ctl, the console and node add send it (sudo, LLMGW_ADMIN_TOKEN or
--token-file). pprof is off unless debug_pprof. admin_listen off loopback
is refused unless admin_remote. Dashboard pages, /metrics and /health are
unchanged.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-04 10:02:44 +02:00

..

gen

Watch the cluster and edit every setting from the console

2026-10-03 22:54:09 +02:00

docgen_test.go

Watch the cluster and edit every setting from the console

2026-10-03 22:54:09 +02:00

docgen.go

Watch the cluster and edit every setting from the console

2026-10-03 22:54:09 +02:00

reference_gen.go

Guard the admin API and pprof with a token only root and the server can read

2026-10-04 10:02:44 +02:00

render.go

Watch the cluster and edit every setting from the console

2026-10-03 22:54:09 +02:00