Enable setting the port and allowPrivateAddress through environment vars

By setting

      BEHIND_PROXY: "true"
      HOLLO_PORT: 80
      ALLOW_PRIVATE_ADDRESS: "true"

one allows private addresses and runs on port 80.

.env.sample

@@ -5,6 +5,12 @@ SECRET_KEY=secret_key  # generate a secret key with `openssl rand -base64 32`
 LOG_LEVEL=info
 LOG_QUERY=false
 BEHIND_PROXY=false
+LISTEN_PORT=3000 # if BEHIND_PROXY=true used as port for the server
+# Setting ALLOW_PRIVATE_ADDRESS to true disables SSRF (Server-Side Request Forgery) protection
+# Set to true to test in local network
+# Will be replaced by list of allowed IPs once https://github.com/dahlia/fedify/issues/157
+# is implemented.
+ALLOW_PRIVATE_ADDRESS=false
 REMOTE_ACTOR_FETCH_POSTS=10
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=

src/federation/index.ts

@@ -110,6 +110,8 @@ if (getRedisUrl() == null) {
 export const federation = createFederation<void>({
   kv,
   queue,
+  // biome-ignore lint/complexity/useLiteralKeys: tsc complains about this (TS4111)
+  allowPrivateAddress: process.env["ALLOW_PRIVATE_ADDRESS"] === "true",
 });
 
 federation

src/index.tsx

@@ -31,5 +31,9 @@ app.get("/favicon.png", async (c) => {
 
 // biome-ignore lint/complexity/useLiteralKeys: tsc complains about this (TS4111)
 const BEHIND_PROXY = process.env["BEHIND_PROXY"] === "true";
+// biome-ignore lint/complexity/useLiteralKeys: tsc complains about this (TS4111)
+const HOLLO_PORT = Number.parseInt(process.env["LISTEN_PORT"] ?? "3000", 10);
 
-export default BEHIND_PROXY ? { fetch: behindProxy(app.fetch.bind(app)) } : app;
+export default BEHIND_PROXY
+  ? { fetch: behindProxy(app.fetch.bind(app)), port: HOLLO_PORT }
+  : app;