From 234c8379378665e93892e4671c4b0fa8bd6d4ac3 Mon Sep 17 00:00:00 2001 From: Paul Schneider Date: Sat, 27 Jun 2026 17:36:57 +0100 Subject: [PATCH] drop baked-in Kestrel:Endpoints:Https from Yavsc.Blogs / Yavsc.Api Both appsettings-blogs.json and appsettings-api.json shipped a Kestrel:Endpoints:Https block pointing at https://localhost:3003 and https://localhost:3004 respectively. These are leftover dev templates that don't match the production ports (5004/5005 for Blogs, 5002/5003 for Api) and crash Kestrel at startup when no cert is configured for those URLs. docker-compose.yaml now sets ASPNETCORE_URLS explicitly per service runtime (http://+:5000/5002/5004 + ASPNETCORE_HTTPS_PORT=empty), which is the authoritative source for the binding. The baked Kestrel block in the appsettings overrides nothing useful and just blocks HTTP-only startup. Search confirms no source code references localhost:3003/3004 (grep across src/*.{cs,json,axaml,cshtml} returns only the two lines we just deleted), so removing the block is safe. --- src/Yavsc.Api/appsettings-api.json | 9 +-------- src/Yavsc.Blogs/appsettings-blogs.json | 9 +-------- 2 files changed, 2 insertions(+), 16 deletions(-) diff --git a/src/Yavsc.Api/appsettings-api.json b/src/Yavsc.Api/appsettings-api.json index 04ea211e..ac626c0d 100644 --- a/src/Yavsc.Api/appsettings-api.json +++ b/src/Yavsc.Api/appsettings-api.json @@ -12,12 +12,5 @@ "Microsoft.Hosting.Lifetime": "Information" } }, - "AllowedHosts": "*", - "Kestrel": { - "Endpoints": { - "Https":{ - "Url": "https://localhost:3004" - } - } - } + "AllowedHosts": "*" } diff --git a/src/Yavsc.Blogs/appsettings-blogs.json b/src/Yavsc.Blogs/appsettings-blogs.json index 00a11c7a..cac9f06b 100644 --- a/src/Yavsc.Blogs/appsettings-blogs.json +++ b/src/Yavsc.Blogs/appsettings-blogs.json @@ -15,12 +15,5 @@ "Microsoft.Hosting.Lifetime": "Information" } }, - "AllowedHosts": "*", - "Kestrel": { - "Endpoints": { - "Https": { - "Url": "https://localhost:3003" - } - } - } + "AllowedHosts": "*" }