[tor-commits] [onionoo/release] Limit Onionoo's listening to localhost.

[karsten at torproject.org]

commit bd86130b0608ee9fb3cb17e8dd180af752a80465
Author: iwakeh <iwakeh at torproject.org>
Date:   Tue Aug 22 07:41:02 2017 +0000

    Limit Onionoo's listening to localhost.
    
    Implements task-23211.
---
 INSTALL.md                   | 5 +++++
 src/main/resources/jetty.xml | 1 +
 2 files changed, 6 insertions(+)

diff --git a/INSTALL.md b/INSTALL.md
index 4c650bb..6980a06 100644
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -117,6 +117,11 @@ By default, Onionoo is configured to run the updater hourly and provide the
 web pages on http://localhost:8080/.  The exact timing for the hourly update
 runs is logged at start-up.
 
+Onionoo's Jetty configuration is done in 'jetty.xml', which can be replaced
+in the war-file.
+All configuration options can be found at
+```http://www.eclipse.org/jetty/documentation/```
+The build.xml file contains Onionoo's current jetty version.
 
 ### Performing the initial run
 
diff --git a/src/main/resources/jetty.xml b/src/main/resources/jetty.xml
index f2dce3d..3e53131 100644
--- a/src/main/resources/jetty.xml
+++ b/src/main/resources/jetty.xml
@@ -27,6 +27,7 @@
           <Ref id="server"/>
         </Arg>
         <Set name="port">8080</Set>
+        <Set name="host">127.0.0.1</Set>
       </New>
     </Arg>
   </Call>