Skip to content

fix: bind HTTP server to localhost by default#17

Open
xPathin wants to merge 1 commit intoAvengeMedia:masterfrom
xPathin:fix/default-listen-localhost
Open

fix: bind HTTP server to localhost by default#17
xPathin wants to merge 1 commit intoAvengeMedia:masterfrom
xPathin:fix/default-listen-localhost

Conversation

@xPathin
Copy link

@xPathin xPathin commented Feb 26, 2026

Summary

  • Default listen_addr changed from ":43654" to "127.0.0.1:43654" in both the Go default config and config.example.toml
  • The previous default binds to all network interfaces, exposing the unauthenticated HTTP API to the LAN

Closes #16

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Default listen_addr binds to 0.0.0.0 — exposes unauthenticated API to the network

1 participant