Overview

Currently, template admins do not have the ability to control the maximum duration for which a port can be exposed in a workspace. With the addition of user-level port sharing, desire to control this security option will increase.

To remedy this, a deployment-wide configuration option for the maximum lifetime of a forwarded/shared port should be added.

Implementation details

This would fall under Deployment Settings > Port Forwarding, and include the ability for ports to stay open indefinitely (as the default option).

Impact

As mentioned before, we're opening the use case of public port sharing to the workspace users, where it was previously controlled by template admins. Security should still lie in the hands of Coder admins. This should likely be baked into #10908.