radicale: Listen only on internal addresses

- Since we are trusting the remote user header, it is much safer not
  listen on external addresses.  We don't that since Apache connects on
  internal address.
This commit is contained in:
Sunil Mohan Adapa 2016-02-26 22:34:25 +05:30
parent 34a6bd09ed
commit 7e87f0304a
No known key found for this signature in database
GPG Key ID: 36C361440C9BC971

View File

@ -49,7 +49,7 @@ def subcommand_setup(_):
aug.set('/files' + DEFAULT_FILE + '/ENABLE_RADICALE', 'yes')
aug.set('/files' + CONFIG_FILE + '/server/hosts',
'0.0.0.0:5232, [::]:5232')
'127.0.0.1:5232, [::1]:5232')
aug.set('/files' + CONFIG_FILE + '/server/base_prefix', '/radicale/')
aug.set('/files' + CONFIG_FILE + '/well-known/caldav',
'/radicale/%(user)s/caldav/')