From 50919910c9a98581757e8ae58d26f94a9e362e85 Mon Sep 17 00:00:00 2001
From: omp-agent <omp@eddydevink.nl>
Date: Mon, 12 Oct 2026 16:34:28 +0200
Subject: [PATCH] bind webservers op 127.0.0.1 (geen wildcard-exposure;
 webhook-verkeer is lokaal)

---
 src/index.js       | 4 ++--
 src/multiplexer.js | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/index.js b/src/index.js
index 9a398de..eeaf38d 100644
--- a/src/index.js
+++ b/src/index.js
@@ -71,14 +71,14 @@ async function startServer() {
       console.error(`Port ${PORT} is in use, retrying in 5 seconds...`)
       setTimeout(() => {
         server.close()
-        server.listen(PORT)
+        server.listen(PORT, '127.0.0.1')
       }, 5000)
     } else {
       throw err
     }
   })
 
-  server.listen({ port: PORT, reuseAddr: true }, () => {
+  server.listen({ port: PORT, host: '127.0.0.1', reuseAddr: true }, () => {
     console.log(`dienst-bot listening on port ${PORT}`)
     console.log(`Allowed group: ${process.env.ALLOWED_GROUP}`)
     console.log(`Bot name: ${process.env.BOT_NAME}`)
diff --git a/src/multiplexer.js b/src/multiplexer.js
index 5a7d72b..15fb0ca 100644
--- a/src/multiplexer.js
+++ b/src/multiplexer.js
@@ -69,4 +69,4 @@ const server = http.createServer((req, res) => {
   })
 })
 
-server.listen(PORT, '0.0.0.0', () => console.log(`multiplexer luistert op ${PORT}`))
\ No newline at end of file
+server.listen(PORT, '127.0.0.1', () => console.log(`multiplexer luistert op ${PORT}`))
\ No newline at end of file