kevinveenbirkenbachandClaude Opus 4.8 b7e2196812 sec(registry): bind the swarm registry to its resolved endpoint instead of every interface ...

Swarm cannot bind published host-mode ports to a single address, so the service moves onto the host network and the registry itself binds REGISTRY_HTTP_ADDR to whatever the manager hostname resolves to on the stack host, which is the only address workers and the local pusher ever use. The lookup fails loudly when resolution is missing or lands on loopback. The orphaned internal-port var is gone and the README security note now describes the real mechanism.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-18 20:36:19 +02:00

..

main.yml

…