Security: bind UI на 127.0.0.1, trust proxy + secure-cookie (!1) · Merge requests · Александр Абашин / MindBox-autotests · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Иван Шишкин requested to merge security/server-hardening into main Jun 30, 2026

H2/M5/M2 hardening боевого UI-сервера:

app.listen на 127.0.0.1 — UI недоступен в обход nginx (M5)
app.set('trust proxy', 1) + cookie.secure — сессия только по HTTPS (M2)

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com