From 9b64ecb2d7e4be1363273f4f399817794a4fb7a9 Mon Sep 17 00:00:00 2001 From: Bobby Rullo Date: Mon, 31 Aug 2015 13:39:23 -0700 Subject: [PATCH] cmd/dex-overlord: bind admin API on 127.0.0.1 Instead of 0.0.0.0; this is safer, since the admin API is very powerful. fixes #97 --- cmd/dex-overlord/main.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/dex-overlord/main.go b/cmd/dex-overlord/main.go index be56db47..e7fd5b95 100644 --- a/cmd/dex-overlord/main.go +++ b/cmd/dex-overlord/main.go @@ -39,7 +39,7 @@ func main() { keyPeriod := fs.Duration("key-period", 24*time.Hour, "length of time for-which a given key will be valid") gcInterval := fs.Duration("gc-interval", time.Hour, "length of time between garbage collection runs") - adminListen := fs.String("admin-listen", "http://0.0.0.0:5557", "scheme, host and port for listening for administrative operation requests ") + adminListen := fs.String("admin-listen", "http://127.0.0.1:5557", "scheme, host and port for listening for administrative operation requests ") localConnectorID := fs.String("local-connector", "local", "ID of the local connector") logDebug := fs.Bool("log-debug", false, "log debug-level information")