#516 The syslog receiver has no authentication or TLS; docs/nix.md shows it on 0.0.0.0 without a firewall note

[Anonymous]

Originally created by: athanclark

The syslog receiver has no authentication or TLS.

This is documented in docs/syslog.md:35.

• The defaults bind loopback: syslog-receiver.mjs:137, syslog.env, compose.yml:187-189, and Windows' 127.0.0.1.
• docs/nix.md:122 shows SYSLOG_HOST = "0.0.0.0" with no firewall note. NixOS's default firewall blocks the port unless opened, but a sentence there would help.

---

From the security review of 2026-11-06 (commit 6776c44), finding I-15: hardening or information, filed publicly because it describes no way in. The exploitable findings are private security advisories.

🤖 Generated with Claude Code

https://claude.ai/code/session_011fFY8eruEi1xAkkMBni13B

[Anonymous]

Ticket changed by: athanclark

• status: open --> closed