core: restrict rest API to 127.0.0.1

Until there is TLS support for this, frontend and ogserver needs to be in the
same box by now.

1 files changed, 2 insertions, 2 deletions

diff --git a/src/main.c b/src/main.c
index d8453de..8b043f7 100644
--- a/src/main.c
+++ b/src/main.c
@@ -74,7 +74,7 @@ int main(int argc, char *argv[])
 	if (parse_json_config(config_file, &ogconfig) < 0)
 		return EXIT_FAILURE;
 
-	socket_rest = og_socket_server_init(ogconfig.rest.port);
+	socket_rest = og_socket_server_init("127.0.0.1", ogconfig.rest.port);
 	if (socket_rest < 0) {
 		syslog(LOG_ERR, "Cannot open REST API server socket\n");
 		exit(EXIT_FAILURE);
@@ -83,7 +83,7 @@ int main(int argc, char *argv[])
 	ev_io_init(&ev_io_server_rest, og_server_accept_cb, socket_rest, EV_READ);
 	ev_io_start(og_loop, &ev_io_server_rest);
 
-	socket_agent_rest = og_socket_server_init("8889");
+	socket_agent_rest = og_socket_server_init("0.0.0.0", "8889");
 	if (socket_agent_rest < 0) {
 		syslog(LOG_ERR, "Cannot open ogClient server socket\n");
 		exit(EXIT_FAILURE);