Files
Eli FosterandClaude Opus 5 057c716700 fix(relay): disable admin dashboard on bad config instead of failing startup
BUZZ_ADMIN_HOST with a missing or invalid password aborted relay startup.
bb-public sets BUZZ_ADMIN_HOST=admin.buzz.xyz in production with no
password configured, so shipping this would have crashlooped the whole
relay fleet — websocket, media, git, everything — over an optional
dashboard.

Log at error! and leave the admin surface off instead. `admin = None`
means is_admin_host() is false, the admin router is never mounted, and
authorize() returns not_found, so nothing admin-scoped is reachable. The
security posture is unchanged; only the blast radius of a config gap is.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Eli Foster <efoster@squareup.com>
2026-08-03 16:50:27 -07:00
..