services: bitwarden: only listen on local host

This was never a problem because the firewall did its job, but better safe than sorry.
2021-07-13 13:34:26 +02:00 · 2021-07-13 13:34:26 +02:00 · c75458d8c9
parent d2835ceb77
commit c75458d8c9
1 changed files with 2 additions and 0 deletions
--- a/services/bitwarden_rs.nix
+++ b/services/bitwarden_rs.nix
@ -47,7 +47,9 @@ in {
        TZ = "Europe/Paris";
        WEB_VAULT_ENABLED = true;
        WEBSOCKET_ENABLED = true;
+        WEBSOCKET_ADDRESS = "127.0.0.1";
        WEBSOCKET_PORT = cfg.websocketPort;
+        ROCKET_ADDRESS = "127.0.0.1";
        ROCKET_PORT = cfg.privatePort;
        SIGNUPS_ALLOWED = false;
        INVITATIONS_ALLOWED = false;