Improve warnings about sonar.search.port/host in sonar.properties

diff --git a/sonar-application/src/main/assembly/conf/sonar.properties b/sonar-application/src/main/assembly/conf/sonar.properties
index acf5aed20d0f21879451f7e825d3386b7f2ce152..c4ac178e12bef9ce1eadf99873f5c9c15c9cae95 100644 (file)
--- a/sonar-application/src/main/assembly/conf/sonar.properties
+++ b/sonar-application/src/main/assembly/conf/sonar.properties
@@ -208,11 +208,12 @@
 #sonar.search.javaAdditionalOpts=
 
 # Elasticsearch port. Default is 9001. Use 0 to get a free port.
-# This port must be private and must not be exposed to the Internet.
+# As a security precaution, should be blocked by a firewall and not exposed to the Internet.
 #sonar.search.port=9001
 
 # Elasticsearch host. The search server will bind this address and the search client will connect to it.
 # Default is 127.0.0.1.
+# As a security precaution, should NOT be set to a publicly available address.
 #sonar.search.host=127.0.0.1