kenmirrors/MagicMirror
1
0
Fork 0
mirror of https://github.com/MichMich/MagicMirror.git synced 2025-06-27 11:50:00 +00:00
Code Issues Projects Releases Wiki Activity

More secure defaults.

Browse Source 
Without config, listen only on looback interface. In sample config
listen on any interface, but use an IP whitelist.

Related to #950
This commit is contained in:
Chris van Marle 2017-08-25 18:40:55 +02:00
parent 763d835f4e
commit 2f05228d91
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
config/config.js.sample
View File

@ -9,7 +9,10 @@
*/ */
var config = { var config = {
address: "localhost", address: "", // Address to listen on, can be
// "localhost", "127.0.0.1", "::1" to listen on loopback interface
// another specific IPv4/6 to listen on a specific interface
// "", "0.0.0.0", "::" to listen on any interface
port: 8080, port: 8080,
ipWhitelist: ["127.0.0.1", "::ffff:127.0.0.1", "::1"], // Set [] to allow all IP addresses ipWhitelist: ["127.0.0.1", "::ffff:127.0.0.1", "::1"], // Set [] to allow all IP addresses
// or add a specific IPv4 of 192.168.1.5 : // or add a specific IPv4 of 192.168.1.5 :

2
js/defaults.js
View File

@ -8,7 +8,7 @@
*/ */
var port = 8080; var port = 8080;
var address = ""; // Default to listening on all interfaces var address = "localhost";
if (typeof(mmPort) !== "undefined") { if (typeof(mmPort) !== "undefined") {
port = mmPort; port = mmPort;
} }