fix: default listen address to localhost only

Plain HTTP should not be exposed to the network. Default to
127.0.0.1:8080 so a TLS-terminating reverse proxy is required
for external access.

Author: brianm

contrib/freebsd/README.md

@@ -57,7 +57,7 @@ pkg add ./epithet-*.pkg
 | `epithet_server_config` | `/usr/local/etc/epithet/server.yaml` | Config file path |
 | `epithet_server_user` | `epithet` | User to run as |
 | `epithet_server_cakey` | `/usr/local/etc/epithet/ca.key` | CA private key path |
-| `epithet_server_listen` | `:8080` | Listen address |
+| `epithet_server_listen` | `127.0.0.1:8080` | Listen address |
 | `epithet_server_logfile` | `/var/log/epithet_server.log` | Log file path |
 
 ## Troubleshooting

contrib/freebsd/rc.d/epithet_server

@@ -30,7 +30,7 @@ load_rc_config $name
 : ${epithet_server_config:="/usr/local/etc/epithet/server.yaml"}
 : ${epithet_server_user:="epithet"}
 : ${epithet_server_cakey:="/usr/local/etc/epithet/ca.key"}
-: ${epithet_server_listen:=":8080"}
+: ${epithet_server_listen:="127.0.0.1:8080"}
 : ${epithet_server_logfile:="/var/log/epithet_server.log"}
 
 pidfile="/var/run/${name}.pid"