From ba1ac50c16e64c189353fb9f7bd10b7dafebb746 Mon Sep 17 00:00:00 2001 From: pstruebi Date: Tue, 29 Jul 2025 13:53:57 +0200 Subject: [PATCH] make our backend accessible only from where its running --- src/auracast/server/multicast_server.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/auracast/server/multicast_server.py b/src/auracast/server/multicast_server.py index 7291db4..7e4e588 100644 --- a/src/auracast/server/multicast_server.py +++ b/src/auracast/server/multicast_server.py @@ -417,4 +417,5 @@ if __name__ == '__main__': level=os.environ.get('LOG_LEVEL', log.INFO), format='%(module)s.py:%(lineno)d %(levelname)s: %(message)s' ) - uvicorn.run(app, host="0.0.0.0", port=5000) \ No newline at end of file + # Bind to localhost only for security: prevents network access, only frontend on same machine can connect + uvicorn.run(app, host="127.0.0.1", port=5000) \ No newline at end of file