From 7e87f0304ae057d2b72eaeb4fb9802f86b40bb02 Mon Sep 17 00:00:00 2001 From: Sunil Mohan Adapa Date: Fri, 26 Feb 2016 22:34:25 +0530 Subject: [PATCH] radicale: Listen only on internal addresses - Since we are trusting the remote user header, it is much safer not listen on external addresses. We don't that since Apache connects on internal address. --- actions/radicale | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/actions/radicale b/actions/radicale index 9f33dd72b..bebe730cf 100755 --- a/actions/radicale +++ b/actions/radicale @@ -49,7 +49,7 @@ def subcommand_setup(_): aug.set('/files' + DEFAULT_FILE + '/ENABLE_RADICALE', 'yes') aug.set('/files' + CONFIG_FILE + '/server/hosts', - '0.0.0.0:5232, [::]:5232') + '127.0.0.1:5232, [::1]:5232') aug.set('/files' + CONFIG_FILE + '/server/base_prefix', '/radicale/') aug.set('/files' + CONFIG_FILE + '/well-known/caldav', '/radicale/%(user)s/caldav/')