Function refusePublicBind

packages/server/src/start.ts:233–241

(message: string)

  const bindClass = classify(opts.host, { bindClass: opts.bindClass });
  if (bindClass !== 'loopback') {
    const refusePublicBind = async (message: string): Promise<never> => {
      try {
        await tokenStore.dispose();
      } catch {
        // best-effort cleanup of the token file on boot refusal
      }
      lockHandle.release();
      throw new Error(message);
    };
    if (opts.insecureNoTls !== true) {
      await refusePublicBind(
        'Refusing to bind a non-loopback host without TLS. ' +