diff --git a/hosts/hub/apps/actual.nix b/hosts/hub/apps/actual.nix
index 8bf4170..739f465 100644
--- a/hosts/hub/apps/actual.nix
+++ b/hosts/hub/apps/actual.nix
@@ -8,7 +8,7 @@
   virtualisation.oci-containers.containers.actual = {
     image = "actualbudget/actual-server:latest";
     ports = [
-      "5006:5006"
+      "127.0.0.1:5006:5006"
     ];
     environment = {
       ACTUAL_LOGIN_METHOD = "header";
diff --git a/hosts/hub/apps/open-webui.nix b/hosts/hub/apps/open-webui.nix
index e9662d0..840bf5e 100644
--- a/hosts/hub/apps/open-webui.nix
+++ b/hosts/hub/apps/open-webui.nix
@@ -10,7 +10,7 @@ in
   virtualisation.oci-containers.containers.open-webui = {
     image = "ghcr.io/open-webui/open-webui:main";
     ports = [
-      "8090:8080"
+      "127.0.0.1:8090:8080"
     ];
     volumes = [ "/var/lib/open-webui:/app/backend/data" ];
     environment = {