Bind to 127.0.0.1 instead of 0.0.0.0 by default

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0dc8b547d755bbefe05498c6e5028b01aafecd48..d3c5542451da609ee1ffd487a7c83303d18991ca 100644 (file)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -65,6 +65,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - MRF: Support for filtering out likely spam messages by rejecting posts from new users that contain links.
 
 ### Changed
+- **Breaking:** bind to 127.0.0.1 instead of 0.0.0.0 by default
 - **Breaking:** Configuration: move from Pleroma.Mailer to Pleroma.Emails.Mailer
 - Thread containment / test for complete visibility will be skipped by default.
 - Enforcement of OAuth scopes

diff --git a/config/config.exs b/config/config.exs
index 3962ac019cd862ce36b5d03ea6f82fdbf28f91e3..0d07fc692233e17e29ce2756a31fad5fd68734b0 100644 (file)
--- a/config/config.exs
+++ b/config/config.exs
@@ -139,6 +139,7 @@ config :pleroma, Pleroma.Web.Endpoint,
   instrumenters: [Pleroma.Web.Endpoint.Instrumenter],
   url: [host: "localhost"],
   http: [
+    ip: {127, 0, 0, 1},
     dispatch: [
       {:_,
        [