Enable only relevant features by default and remove the unneeded port…

… exposes
pvarki · Apr 10, 2024 · 86dc02e · 86dc02e
1 parent adab972
commit 86dc02e
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -33,11 +33,8 @@ services:
     networks:
       - taknet
     ports:
-      - '8443:8443'
-      - '8444:8444'
-      - '8446:8446'
       - '8089:8089'
-      - '8080:8080'
+      - '8443:8443'
     command: ./opt/scripts/start-tak.sh config
     healthcheck:
       test: 'true'  # FIXME

diff --git a/templates/CoreConfig.tpl b/templates/CoreConfig.tpl
@@ -5,10 +5,13 @@
     <network multicastTTL="5">
         <input _name="stdssl" protocol="tls" port="8089" coreVersion="2"/>
 
-        <!-- web connectors -->
+        <!-- default web connectors
         <connector port="8443" _name="https"/>
         <connector port="8444" useFederationTruststore="true" _name="fed_https"/>
         <connector port="8446" clientAuth="false" _name="cert_https"/>
+        -->
+        <!-- Disable webtak and non-admin user interfaces -->
+        <connector port="8443" _name="https" enableWebtak="false" enableNonAdminUI="false" />
     </network>
     <auth>
         <File location="/opt/tak/data/UserAuthenticationFile.xml"/>