feat: change forgejo-runner daemon bind address #229

Open
opened 2024-08-11 23:58:28 +00:00 by fadedave · 3 comments

Hi. I would like to change the bind address of the act_runner daemon, from :: to 127.0.0.1. This increases security / makes the network more legible. I have not found an option to do this. So it would be great if there was an option in the config file for example named bind_address or listen_address.
Thanks in advance.

Hi. I would like to change the bind address of the act_runner daemon, from :: to 127.0.0.1. This increases security / makes the network more legible. I have not found an option to do this. So it would be great if there was an option in the config file for example named bind_address or listen_address. Thanks in advance.
fadedave changed title from Change act_runner daemon bind address to [FEAT] Change act_runner daemon bind address 2024-08-11 23:58:44 +00:00
Contributor
cache:
  # Enable cache server to use actions/cache.
  enabled: false
  # The directory to store the cache data.
  # If it's empty, the cache data will be stored in $HOME/.cache/actcache.
  dir: ""
  # The host of the cache server.
  # It's not for the address to listen, but the address to connect from job containers.
  # So 0.0.0.0 is a bad choice, leave it empty to detect automatically.
  host: ""
  # The port of the cache server.
  # 0 means to use a random available port.
  port: 0
  # The external cache server URL. Valid only when enable is true.
  # If it's specified, it will be used to set the ACTIONS_CACHE_URL environment variable. The URL should generally end with "/".
  # Otherwise it will be set to the the URL of the internal cache server.
  external_server: ""

This is what you are looking for.

I suppose you figured it out by now 😇

```ini cache: # Enable cache server to use actions/cache. enabled: false # The directory to store the cache data. # If it's empty, the cache data will be stored in $HOME/.cache/actcache. dir: "" # The host of the cache server. # It's not for the address to listen, but the address to connect from job containers. # So 0.0.0.0 is a bad choice, leave it empty to detect automatically. host: "" # The port of the cache server. # 0 means to use a random available port. port: 0 # The external cache server URL. Valid only when enable is true. # If it's specified, it will be used to set the ACTIONS_CACHE_URL environment variable. The URL should generally end with "/". # Otherwise it will be set to the the URL of the internal cache server. external_server: "" ``` This is [what you are looking for](https://forgejo.org/docs/next/admin/runner-installation/#configuration). I suppose you figured it out by now 😇
Author

Thanks for the reply!
I tried out the config, and while the port settings work, the host setting sadly does nothing :(
Config:

cache:
  host: "127.0.0.1"
  port: 8008
  proxy_port: 8009

Netstat:

tcp6       0      0 :::8009                 :::*                    LISTEN      1248362/act_runner  
tcp6       0      0 :::8008                 :::*                    LISTEN      1248362/act_runner 

It is still listening on all addresses.

Thanks for the reply! I tried out the config, and while the port settings work, the host setting sadly does nothing :( Config: ``` cache: host: "127.0.0.1" port: 8008 proxy_port: 8009 ``` Netstat: ``` tcp6 0 0 :::8009 :::* LISTEN 1248362/act_runner tcp6 0 0 :::8008 :::* LISTEN 1248362/act_runner ``` It is still listening on all addresses.
fadedave reopened this issue 2025-07-13 19:14:43 +00:00
earl-warren changed title from [FEAT] Change act_runner daemon bind address to feat: change act_runner daemon bind address 2025-07-14 12:53:26 +00:00
earl-warren changed title from feat: change act_runner daemon bind address to bug: change act_runner daemon bind address 2025-07-14 12:54:41 +00:00
Contributor

My bad, I misunderstood the question. Looking at the config.example.yaml comments, it needs to be fixed in the documentation because it currently is rather confusing. The host and extrenal_server parts need to be reworded.

It is also not possible to set the listen address and that is a good feature to have.

My bad, I misunderstood the question. Looking at the `config.example.yaml` comments, it needs to be fixed in the documentation because it currently is rather confusing. The `host` and `extrenal_server` parts need to be reworded. It is also not possible to set the listen address and that is a good feature to have.
earl-warren changed title from bug: change act_runner daemon bind address to bug: change forgejo-runner daemon bind address 2025-07-14 20:07:47 +00:00
earl-warren changed title from bug: change forgejo-runner daemon bind address to feat: change forgejo-runner daemon bind address 2025-07-14 20:08:01 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
forgejo/runner#229
No description provided.