Science Commit 5.

Author: mearvk

scripts/nwe-ports.sh

@@ -97,7 +97,7 @@ nwe_open_ports() {
 
     # SECURITY: Set NWE_TRUSTED_IP to restrict access to a specific IP.
     # Without it, ports are open to ALL sources (0.0.0.0).
-    if [ -z "$NWE_TRUSTED_IP" ]; then
+    if [ -z "${NWE_TRUSTED_IP:-}" ]; then
         echo "[WARN] NWE_TRUSTED_IP not set — opening ports to ALL sources. Set NWE_TRUSTED_IP for production."
     fi
 
@@ -110,7 +110,7 @@ nwe_open_ports() {
         for PORT in "${NWE_PORTS[@]}"; do
             if ufw status | grep -q "$PORT/tcp.*ALLOW" 2>/dev/null; then
                 SKIPPED=$((SKIPPED + 1))
-            elif [ -n "$NWE_TRUSTED_IP" ]; then
+            elif [ -n "${NWE_TRUSTED_IP:-}" ]; then
                 if sudo ufw allow from "$NWE_TRUSTED_IP" to any port "$PORT" proto tcp comment "NWE: $PORT" 2>/dev/null; then
                     OPENED=$((OPENED + 1))
                 else