From 5d5eaaf74d082a1303ce5142f975f71ac31904d9 Mon Sep 17 00:00:00 2001 From: Simon Brandhof Date: Wed, 9 Sep 2015 22:42:17 +0200 Subject: [PATCH] Improve warnings about sonar.search.port/host in sonar.properties --- sonar-application/src/main/assembly/conf/sonar.properties | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sonar-application/src/main/assembly/conf/sonar.properties b/sonar-application/src/main/assembly/conf/sonar.properties index acf5aed20d0..c4ac178e12b 100644 --- a/sonar-application/src/main/assembly/conf/sonar.properties +++ b/sonar-application/src/main/assembly/conf/sonar.properties @@ -208,11 +208,12 @@ #sonar.search.javaAdditionalOpts= # Elasticsearch port. Default is 9001. Use 0 to get a free port. -# This port must be private and must not be exposed to the Internet. +# As a security precaution, should be blocked by a firewall and not exposed to the Internet. #sonar.search.port=9001 # Elasticsearch host. The search server will bind this address and the search client will connect to it. # Default is 127.0.0.1. +# As a security precaution, should NOT be set to a publicly available address. #sonar.search.host=127.0.0.1 -- 2.39.5