mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
BUZZ_ADMIN_HOST with a missing or invalid password aborted relay startup. bb-public sets BUZZ_ADMIN_HOST=admin.buzz.xyz in production with no password configured, so shipping this would have crashlooped the whole relay fleet — websocket, media, git, everything — over an optional dashboard. Log at error! and leave the admin surface off instead. `admin = None` means is_admin_host() is false, the admin router is never mounted, and authorize() returns not_found, so nothing admin-scoped is reachable. The security posture is unchanged; only the blast radius of a config gap is. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Signed-off-by: Eli Foster <efoster@squareup.com>