security: bind server to 127.0.0.1 so the tunnel/proxy basic-auth gate can't be bypassed on the LAN

633acd767a668e618dd927ee69909d02ffff8dc4 · 2026-07-16 07:51:19 -0700 · Steve

Files touched

M server.js

Diff

commit 633acd767a668e618dd927ee69909d02ffff8dc4
Author: Steve <steve@designerwallcoverings.com>
Date:   Thu Jul 16 07:51:19 2026 -0700

    security: bind server to 127.0.0.1 so the tunnel/proxy basic-auth gate can't be bypassed on the LAN
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index e1b5476..5e6ef75 100644
--- a/server.js
+++ b/server.js
@@ -287,7 +287,7 @@ const server = http.createServer(async (req, res) => {
   res.end('not found');
 });
 
-server.listen(PORT, function () {
+server.listen(PORT, '127.0.0.1', function () {
   const addr = this.address();
   console.log('[permit-radar] http://localhost:' + addr.port);
   console.log('[permit-radar] Admin: BASIC_AUTH=admin:DW2024! PORT=3905 node server.js, then visit /admin');

← b1dbc23 auto-save: 2026-07-16T07:41:55 (1 files) — data/subscribers. · back to Permit Radar · auto-save: 2026-07-16T08:12:03 (1 files) — data/shopify-cata 994b444 →