fix(sol): bind validator and RPC to same address

ansible/group_vars/sol_rpc.yml

@@ -18,7 +18,9 @@ solana_ledger_dir: /var/lib/solana/ledger
 solana_accounts_dir: /var/lib/solana/accounts
 solana_log_dir: /var/log/solana
 
-solana_rpc_bind_address: 127.0.0.1
+# Note: agave-validator expects all sockets to be bound to the same IP.
+# For now we bind validator + RPC to 0.0.0.0 and rely on network hardening in a later etap.
+solana_bind_address: 0.0.0.0
 solana_rpc_port: 8899
 solana_rpc_pubsub_port: 8900
 solana_dynamic_port_range: "8000-8020"

ansible/templates/solana-rpc.service.j2

@@ -17,7 +17,8 @@ ExecStart={{ solana_validator_bin }} \
   --identity {{ solana_identity_path }} \
   --ledger {{ solana_ledger_dir }} \
   --accounts {{ solana_accounts_dir }} \
-  --rpc-bind-address {{ solana_rpc_bind_address }} \
+  --bind-address {{ solana_bind_address }} \
+  --rpc-bind-address {{ solana_bind_address }} \
   --rpc-port {{ solana_rpc_port }} \
   --dynamic-port-range {{ solana_dynamic_port_range }}{% for ep in solana_entrypoints %} \
   --entrypoint {{ ep }}{% endfor %}{% for kv in solana_known_validators %} \