From 8ce910091348c4f5889c779a4a5f4ecaf5777d51 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Tue, 23 Jan 2024 05:32:34 +0100
Subject: [PATCH] kanidm: explicitly bind to localhost

---
 hosts/tsuki/services/kanidm.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/tsuki/services/kanidm.nix b/hosts/tsuki/services/kanidm.nix
index ac201b2..412f94a 100644
--- a/hosts/tsuki/services/kanidm.nix
+++ b/hosts/tsuki/services/kanidm.nix
@@ -26,6 +26,7 @@ in {
       domain = "auth.nani.wtf";
       tls_chain = "${credsDir}/fullchain.pem";
       tls_key = "${credsDir}/key.pem";
+      bindaddress = "127.0.0.1:8300";
       online_backup = {
         path = "/data/backup/kanidm";
         schedule = "00 22 * * *";