"""Run `python -m control`; never exposes the control plane on LAN by default."""
import os
import uvicorn

from .app import create_app

if __name__ == '__main__':
    # Access logs include path identifiers; disable to avoid accidental secret
    # disclosure if a malformed client includes credentials in a URL.
    uvicorn.run(create_app(), host=os.getenv('CONTROL_HOST', '127.0.0.1'),
                port=int(os.getenv('CONTROL_PORT', '8092')), access_log=False,
                proxy_headers=False)