Feature request: can we add support for unix sockets in the webserver

[rajputa-deshaw]

I would like to use zoekt with an nginx proxy that uses sockets for connecting with the zoekt webserver. Would it be possible to add support for sockets in the webserver?

[linear]

CU-2878

[keegancsmith]

@rajputa-deshaw I got an LLM to implement this just to get an idea of how much work it is. #1058

TBH I don't like the amount of code it adds. I've used nginx plenty before, you don't have to use unix sockets. I realise it's nice not having to manage ports allocation, but I'd prefer sticking with only supporting TCP.

[rajputa-deshaw]

Hi @keegancsmith , thanks for taking a look. For my use case, there might be users on the same host where zoekt is running and I don't want them accessing the zoekt instance bypassing the nginx proxy. I thought the cleanest way to achieve that was through unix sockets. Do you have any recommendations that might work without requiring changes in zoekt?

[keegancsmith]

Multi user system, nice to see those still exist. A container? If I remember iptables had an owner module, so you could use a firewall. Otherwise I'd suggest maintaining the PR I sent as a patch and using that.

[rajputa-deshaw]

Configuring iptables isn't feasible for me. The intention behind this feature request was not having to deal with maintaining a patch but if I have to maintain a patch then I will just put the auth in the patch itself. Thanks for taking a look and the PR, I think we can close this issue.