how to disable /metrics and /debug/vars

[mr-m0nst3r]

Hi,

I'm testing on my local machine using docker, I found two endpoints that are not required by CT policy or RFCs, are there any config or env variables that I can stop providing these two endpoints?

[mhutchinson]

Hello! Did you mean to open this against https://github.com/google/certificate-transparency-go ?

We don't recommend exposing the trillian instance itself, it should always be hidden behind a personality, e.g. the CTFE.

In any event, setting --http_endpoint="" ought to disable all HTTP endpoints for Trillian.