From dd4c780c4d1ad62a39e8f5c7fd4e9579b311d2a9 Mon Sep 17 00:00:00 2001
From: "Rodrigo Rodriguez (Pragmatismo)" <me@rodrigorodriguez.com>
Date: Sat, 11 Apr 2026 07:49:11 -0300
Subject: [PATCH] Fix Zitadel health check and add ss command to allowed
 commands

- Add 'ss' to ALLOWED_COMMANDS for port checking
- Fix Zitadel health check URL to include full address
---
 src/core/bootstrap/bootstrap_utils.rs | 2 +-
 src/security/command_guard.rs         | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/core/bootstrap/bootstrap_utils.rs b/src/core/bootstrap/bootstrap_utils.rs
index 107801d5..8e46b2d7 100644
--- a/src/core/bootstrap/bootstrap_utils.rs
+++ b/src/core/bootstrap/bootstrap_utils.rs
@@ -226,7 +226,7 @@ pub fn zitadel_health_check() -> bool {
                 "2",
                 "-m",
                 "3",
-                "/debug/healthz",
+                "http://localhost:8300/debug/healthz",
             ])
         })
         .and_then(|c| c.execute());
diff --git a/src/security/command_guard.rs b/src/security/command_guard.rs
index e0e941c0..0a81cbc2 100644
--- a/src/security/command_guard.rs
+++ b/src/security/command_guard.rs
@@ -51,6 +51,7 @@ static ALLOWED_COMMANDS: LazyLock<HashSet<&'static str>> = LazyLock::new(|| {
         "true",
         "rm",
         "find",
+        "ss",
         // Test/dev utilities
         "cargo",
         "redis-server",