From f124082d3da2dcdb7a8cbdbba1275a6d6ecb988e Mon Sep 17 00:00:00 2001
From: Warren <warren@momentry.ddns.net>
Date: Sat, 20 Jun 2026 13:43:12 +0800
Subject: [PATCH] fix(ssh): Change bind_address to 0.0.0.0 for Docker container
 access (Phase 8.3)

---
 data/auth.sqlite                       | Bin 73728 -> 73728 bytes
 markbase-core/src/ssh_server/server.rs |   6 +++---
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/data/auth.sqlite b/data/auth.sqlite
index 323d51d0f2147307a6b0f0d1102ce07bace6debe..ab9c3a45811899095ba6af861b47790151d69720 100644
GIT binary patch
delta 302
zcmZoTz|wGlWr8$g*F+g-#;%PC?J|rRlMhNMOy-ci!=|{TiK9Pj^D9|4Mj*Sfu0M0~
zH@QDdic2<sk$=uF`I47emMJ$sH#M)MsFM8^C$lJ1N@{LC`-{zA^gr+mykuqOWMY5C
zz`z1#07dPwiu(We=W}F00$iIJ3z!v{9oZ*OW<Su##6Eemq5vm5lf2_(#gihuW{OLg
zi%XM}Q;Un`9Y7+RPaU`7V0PqPGnxHDBNOkM&58<2yqp}&ER0z|wT_#&-t}i<cI0_E
znf*Z{6VFSabUY6aH?uS&)D*|fU*C8MF-lK%_`eD4xBvh78E0?*!q51hpLaHryBGle
C=wC|!

delta 255
zcmZoTz|wGlWr8$g>qHr6#@3Aq?J|t1lMhNMOy-ci!zMhXiK9P#^D9|4Mj*Sfu0L(^
zH@QDd!c#VXk$=uF`HYuYmMJ$sH#M)MsFM9TC$lJ1N@{LC`_s)|^gr+mJY!|%WMY5L
zz`z1#07dPwiu(We=W}2{0$iIJ3z!v{9oV-_W<SulSy4cTok`wdvf@dR&8LoAaWFgZ
zZk^120VtuM%e#5&U4JHK2cEB!*&l#Ja(O1de8auzt-TPV)MSVMo4}6!|DT_6*7h&_
NjQ{z0XCYa{003#sQxO0F

diff --git a/markbase-core/src/ssh_server/server.rs b/markbase-core/src/ssh_server/server.rs
index 2a169a9..4daa973 100644
--- a/markbase-core/src/ssh_server/server.rs
+++ b/markbase-core/src/ssh_server/server.rs
@@ -34,7 +34,7 @@ impl Default for SshServerConfig {
     fn default() -> Self {
         Self {
             port: 2024,
-            bind_address: "127.0.0.1".to_string(),
+            bind_address: "0.0.0.0".to_string(), // ⭐⭐⭐⭐⭐ Phase 8.3: Allow Docker container access
             security_config: SshSecurityConfig::enterprise_default(),
             pg_conn: None,
             upload_hook_config: crate::config::UploadHookSection::default(),
@@ -48,7 +48,7 @@ impl SshServerConfig {
         let config = SshSecurityConfig::load_from_file(path)?;
         Ok(Self {
             port: 2024,
-            bind_address: "127.0.0.1".to_string(),
+            bind_address: "0.0.0.0".to_string(), // ⭐⭐⭐⭐⭐ Phase 8.3: Allow Docker container access
             security_config: config,
             pg_conn: None,
             upload_hook_config: crate::config::UploadHookSection::default(),
@@ -701,7 +701,7 @@ fn extract_username_from_auth_request(
 pub fn run_ssh_server(port: Option<u16>, pg_conn: Option<&str>) -> Result<()> {
     let config = SshServerConfig {
         port: port.unwrap_or(2024),
-        bind_address: "127.0.0.1".to_string(),
+        bind_address: "0.0.0.0".to_string(), // ⭐⭐⭐⭐⭐ Phase 8.3: Allow Docker container access
         security_config: SshSecurityConfig::enterprise_default(),
         pg_conn: pg_conn.map(|s| s.to_string()),
         upload_hook_config: crate::config::UploadHookSection::default(),