From 0dbca02da01fa5efd393ac9f116a7d6394cdb9a0 Mon Sep 17 00:00:00 2001
From: lyjjl <104555884+lyjjl@users.noreply.github.com>
Date: Sat, 31 Jan 2026 12:32:12 +0800
Subject: [PATCH] feat(script): Auto bind WebUI to 0.0.0.0 in headless mode

---
 script/start-linux.sh | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/script/start-linux.sh b/script/start-linux.sh
index b91769cc..c2956a15 100644
--- a/script/start-linux.sh
+++ b/script/start-linux.sh
@@ -21,7 +21,6 @@ check_sudo() {
     sudo -v || error "Sudo 验证失败或被取消，脚本终止。"
 }
 
-
 trap cleanup SIGINT SIGTERM
 
 confirm() {
@@ -31,7 +30,6 @@ confirm() {
     [[ "$key" == "Y" || "$key" == "y" || "$key" == "" ]]
 }
 
-
 # 环境检查
 if command -v pacman &> /dev/null; then
     DISTRO="arch"
@@ -89,7 +87,6 @@ install_debian() {
 chmod +x "$SCRIPT_DIR/bin/llbot/node" "$SCRIPT_DIR/bin/pmhq/pmhq" "$LLBOT_CLI_BIN" 2>/dev/null
 sudo chown -R $(whoami):$(whoami) "$SCRIPT_DIR/bin" 2>/dev/null
 
-
 echo "------------------------------------------------"
 echo "1) GUI 模式 (有界面)"
 echo "2) Shell 模式 (无界面)"
@@ -138,7 +135,9 @@ run_llbot() {
     log "启动模式: $([ $USE_XVFB -eq 1 ] && echo "Headless" || echo "GUI")"
 
     if [ $USE_XVFB -eq 1 ]; then
-        env $IM_ENV xvfb-run -a "$LLBOT_CLI_BIN"
+        warn "Headless 模式将监听 0.0.0.0，可能暴露服务到公网/内网。"
+        warn "请用防火墙/安全组限制来源，或使用 SSH 隧道再访问。"
+        env $IM_ENV xvfb-run -a "$LLBOT_CLI_BIN" --host=0.0.0.0
     else
         [ "$DISTRO" != "arch" ] && xhost +local:$(whoami) > /dev/null 2>&1
         env $IM_ENV "$LLBOT_CLI_BIN"