Disable insecure spring boot actuator endpoints by default.

Spring Boot Actuator only exposes the /actuator/health /actuator/info endpoint by default
apache · Mar 13, 2024 · c19c4a9 · c19c4a9
1 parent 10bd2b4
commit c19c4a9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/alpha/alpha-server/src/main/resources/application.yaml b/alpha/alpha-server/src/main/resources/application.yaml
@@ -140,7 +140,7 @@ management:
   endpoints:
     web:
       exposure:
-        include: "*"
+        include: "health,info"
   health:
     redis:
       enabled: false