From ac56efb84476f534338aed445cdb8d442eb07d23 Mon Sep 17 00:00:00 2001
From: Julian Huang <59319423+DimensionWieldr@users.noreply.github.com>
Date: Tue, 26 May 2026 15:19:58 -0400
Subject: [PATCH 1/3] Comment out FIPS-incompatible port configurations in
 config.xml

---
 programs/server/config.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/programs/server/config.xml b/programs/server/config.xml
index 383bf21c1bda..1998c8e48a44 100644
--- a/programs/server/config.xml
+++ b/programs/server/config.xml
@@ -1,5 +1,5 @@
 <!--
-  NOTE: User and query level settings are set up in "users.xml" file.
+  sNOTE: User and query level settings are set up in "users.xml" file.
   If you have accidentally specified user-level settings here, server won't start.
   You can either move the settings to the right place inside "users.xml" file
    or add <skip_check_for_incorrect_settings>1</skip_check_for_incorrect_settings> here.
@@ -143,7 +143,7 @@
          This interface is also used by ODBC and JDBC drivers (DataGrip, Dbeaver, ...)
          and by most of the web interfaces (embedded UI, Grafana, Redash, ...).
       -->
-    <http_port>8123</http_port>
+    <!-- <http_port>8123</http_port> -->
 
     <!-- Port for interaction by native protocol with:
          - clickhouse-client and other native ClickHouse tools (clickhouse-benchmark);
@@ -172,12 +172,12 @@
     <!-- Compatibility with MySQL protocol.
          ClickHouse will pretend to be MySQL for applications connecting to this port.
     -->
-    <mysql_port>9004</mysql_port>
+    <!-- <mysql_port>9004</mysql_port> -->
 
     <!-- Compatibility with PostgreSQL protocol.
          ClickHouse will pretend to be PostgreSQL for applications connecting to this port.
     -->
-    <postgresql_port>9005</postgresql_port>
+    <!-- <postgresql_port>9005</postgresql_port> -->
 
     <!-- HTTP API with TLS (HTTPS).
          You have to configure certificate to enable this interface.
@@ -204,7 +204,7 @@
          Data transferred over connections to this port should not go through untrusted networks.
          See also 'interserver_https_port'.
       -->
-    <interserver_http_port>9009</interserver_http_port>
+    <!-- <interserver_http_port>9009</interserver_http_port> -->
 
     <!-- Port for communication between replicas with TLS.
          You have to configure certificate to enable this interface.

From eee5f27730f9f586a44b4456b774b9cc6b3ea5f8 Mon Sep 17 00:00:00 2001
From: Julian Huang <59319423+DimensionWieldr@users.noreply.github.com>
Date: Tue, 26 May 2026 15:21:33 -0400
Subject: [PATCH 2/3] Fix typo

---
 programs/server/config.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/programs/server/config.xml b/programs/server/config.xml
index 1998c8e48a44..99187f629b06 100644
--- a/programs/server/config.xml
+++ b/programs/server/config.xml
@@ -1,5 +1,5 @@
 <!--
-  sNOTE: User and query level settings are set up in "users.xml" file.
+  NOTE: User and query level settings are set up in "users.xml" file.
   If you have accidentally specified user-level settings here, server won't start.
   You can either move the settings to the right place inside "users.xml" file
    or add <skip_check_for_incorrect_settings>1</skip_check_for_incorrect_settings> here.

From e1f2c45747b1c788e86c2ccaba060c021bb56314 Mon Sep 17 00:00:00 2001
From: Julian Huang <59319423+DimensionWieldr@users.noreply.github.com>
Date: Tue, 26 May 2026 18:12:16 -0400
Subject: [PATCH 3/3] Uncomment HTTP and interserver HTTP port configurations

---
 programs/server/config.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/programs/server/config.xml b/programs/server/config.xml
index 99187f629b06..226af3c018d1 100644
--- a/programs/server/config.xml
+++ b/programs/server/config.xml
@@ -143,7 +143,7 @@
          This interface is also used by ODBC and JDBC drivers (DataGrip, Dbeaver, ...)
          and by most of the web interfaces (embedded UI, Grafana, Redash, ...).
       -->
-    <!-- <http_port>8123</http_port> -->
+    <http_port>8123</http_port>
 
     <!-- Port for interaction by native protocol with:
          - clickhouse-client and other native ClickHouse tools (clickhouse-benchmark);
@@ -204,7 +204,7 @@
          Data transferred over connections to this port should not go through untrusted networks.
          See also 'interserver_https_port'.
       -->
-    <!-- <interserver_http_port>9009</interserver_http_port> -->
+    <interserver_http_port>9009</interserver_http_port>
 
     <!-- Port for communication between replicas with TLS.
          You have to configure certificate to enable this interface.