fix: default WebUI bind host back to loopback (#412)

* fix: change default bind host to loopback for security across all components * fix: update documentation and tests for loopback host configuration and security warnings
2026-08-07 17:13:57 +01:00
parent b40b6f784d
commit 0c21a01f6f
12 changed files with 162 additions and 116 deletions
@@ -123,7 +123,7 @@ def test_no_host_flag_leaves_config_defaults(monkeypatch):

    assert result.exit_code == 0
    assert "webui_host" not in calls["overrides"]
-    assert calls["webui_config"].webui_host == "0.0.0.0"
+    assert calls["webui_config"].webui_host == "127.0.0.1"


 def _run_ensure_backend(monkeypatch, config, *, server_up=True):