security: bind server to 127.0.0.1 so the tunnel/proxy basic-auth gate can't be bypassed on the LAN

6520d1cca9cc6c33fe2409882fa68d0d7b6f3b8c · 2026-07-16 07:51:19 -0700 · Steve

Files touched

M server.js

Diff

commit 6520d1cca9cc6c33fe2409882fa68d0d7b6f3b8c
Author: Steve <steve@designerwallcoverings.com>
Date:   Thu Jul 16 07:51:19 2026 -0700

    security: bind server to 127.0.0.1 so the tunnel/proxy basic-auth gate can't be bypassed on the LAN
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index 8f31bf4..1edc643 100644
--- a/server.js
+++ b/server.js
@@ -245,7 +245,7 @@ http.createServer((req, res) => {
   res.writeHead(404, { 'Content-Type': 'text/plain' });
   res.end('Not found: ' + pathname);
 
-}).listen(PORT, function () {
+}).listen(PORT, '127.0.0.1', function () {
   console.log('[reno-visualizer] http://localhost:' + this.address().port);
   console.log('  Admin: http://localhost:' + this.address().port + '/admin');
   if (BASIC_AUTH) console.log('  Site auth: ' + BASIC_AUTH.split(':')[0] + ':***');

← 87ca83c auto-save: 2026-07-16T07:41:55 (1 files) — data/leads.json · back to Reno Visualizer · auto-save: 2026-07-16T08:12:03 (1 files) — data/shopify-cata e870f08 →