mirror of
https://github.com/XRPLF/rippled.git
synced 2026-08-21 14:20:56 +00:00
173e76556e
The mainnet and devnet telemetry configs are host processes sharing one network namespace and working directory, and they agreed on every port and both database paths. Running them together left the second unable to bind, and running them in sequence pointed a mainnet node at a store holding the other network's ledgers, silently and with no error. Offset the mainnet ports by ten and name both database paths after the network, matching what debug_logfile already did. Also narrow the attack surface this config carried. [port_ws_public] has no admin key, so every caller on it is a guest, and it was bound to all interfaces on a node following Mainnet; it is now loopback, and nothing in the repo connects to that port. [signing_support] is removed: it only affects non-admin callers, the admin ports already grant signing to local callers, and upstream deprecates the commands it exposes. Verified against a running node: signing still succeeds on the admin port and is refused as notSupported on the public one.