bind webservers op 127.0.0.1 (geen wildcard-exposure; webhook-verkeer is lokaal)

src/index.js

@@ -71,14 +71,14 @@ async function startServer() {
       console.error(`Port ${PORT} is in use, retrying in 5 seconds...`)
       setTimeout(() => {
         server.close()
-        server.listen(PORT)
+        server.listen(PORT, '127.0.0.1')
       }, 5000)
     } else {
       throw err
     }
   })
 
-  server.listen({ port: PORT, reuseAddr: true }, () => {
+  server.listen({ port: PORT, host: '127.0.0.1', reuseAddr: true }, () => {
     console.log(`dienst-bot listening on port ${PORT}`)
     console.log(`Allowed group: ${process.env.ALLOWED_GROUP}`)
     console.log(`Bot name: ${process.env.BOT_NAME}`)

src/multiplexer.js

@@ -69,4 +69,4 @@ const server = http.createServer((req, res) => {
   })
 })
 
-server.listen(PORT, '0.0.0.0', () => console.log(`multiplexer luistert op ${PORT}`))
+server.listen(PORT, '127.0.0.1', () => console.log(`multiplexer luistert op ${PORT}`))