From 0d1e25019eaa8ee65ed323252f30b7dfff2d3b2a Mon Sep 17 00:00:00 2001 From: mikael-lovqvists-claude-agent Date: Sat, 7 Mar 2026 21:18:38 +0000 Subject: [PATCH] Change default bind address to 127.0.0.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Safer default — network exposure requires explicit --bind or CONDUIT_BIND. Co-Authored-By: Claude Sonnet 4.6 --- server/index.mjs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/index.mjs b/server/index.mjs index 2c60315..bbaff76 100644 --- a/server/index.mjs +++ b/server/index.mjs @@ -10,7 +10,7 @@ function get_arg(argv, flag) { } const PORT = process.env.CONDUIT_PORT || 3015; -const BIND = get_arg(process.argv, '--bind') || process.env.CONDUIT_BIND || '0.0.0.0'; +const BIND = get_arg(process.argv, '--bind') || process.env.CONDUIT_BIND || '127.0.0.1'; const secrets_path = get_arg(process.argv, "--secrets"); let secrets;