From 56124c38b7bc804d10c954d660d4a3c93beb8ac8 Mon Sep 17 00:00:00 2001 From: jochen Date: Wed, 16 Sep 2026 21:24:13 +0200 Subject: [PATCH] Phase 3.2: the foundation broker binds amqp (5672) mesh-wide for consumers MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Like the store, the amqp provision is plaintext 5672 (vhost-per-login), so a consumer must reach it — bind 0.0.0.0 (firewall-gated to `mesh`, WireGuard- encrypted on the wire) instead of loopback. amqps (5671) was already mesh-wide; management (15672) stays loopback for the host-networked provisioner. Issue 051 (WBS 3.2). Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx --- examples/foundation-first-node.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/foundation-first-node.lock b/examples/foundation-first-node.lock index d5bfdd1..cbdf3e3 100644 --- a/examples/foundation-first-node.lock +++ b/examples/foundation-first-node.lock @@ -119,7 +119,7 @@ "type": "container", "name": "mesh-broker", "image": "192.0.2.250:5000/cloudamqp/lavinmq@sha256:b117c254e6e269a29db479e6b410ca4e46e035b4981e49d24b159673ef09d336", - "ports": ["5671:5671", "127.0.0.1:5672:5672", "127.0.0.1:15672:15672"], + "ports": ["5671:5671", "5672:5672", "127.0.0.1:15672:15672"], "volumes": ["mesh-broker-data:/var/lib/lavinmq", "mesh-broker-tls:/tls:ro"], "args": ["--amqps-port=5671", "--cert=/tls/tls.crt", "--key=/tls/tls.key"] },