From c657a2c301cb7f4ad73e1a38adb4a9ab38593085 Mon Sep 17 00:00:00 2001
From: Nolan Darilek <nolan@thewordnerd.info>
Date: Thu, 24 Apr 2025 14:59:23 -0500
Subject: [PATCH] Only bind to local ports.

---
 hosts/hub/apps/actual.nix     | 2 +-
 hosts/hub/apps/open-webui.nix | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/hosts/hub/apps/actual.nix b/hosts/hub/apps/actual.nix
index 8bf4170..739f465 100644
--- a/hosts/hub/apps/actual.nix
+++ b/hosts/hub/apps/actual.nix
@@ -8,7 +8,7 @@
   virtualisation.oci-containers.containers.actual = {
     image = "actualbudget/actual-server:latest";
     ports = [
-      "5006:5006"
+      "127.0.0.1:5006:5006"
     ];
     environment = {
       ACTUAL_LOGIN_METHOD = "header";
diff --git a/hosts/hub/apps/open-webui.nix b/hosts/hub/apps/open-webui.nix
index e9662d0..840bf5e 100644
--- a/hosts/hub/apps/open-webui.nix
+++ b/hosts/hub/apps/open-webui.nix
@@ -10,7 +10,7 @@ in
   virtualisation.oci-containers.containers.open-webui = {
     image = "ghcr.io/open-webui/open-webui:main";
     ports = [
-      "8090:8080"
+      "127.0.0.1:8090:8080"
     ];
     volumes = [ "/var/lib/open-webui:/app/backend/data" ];
     environment = {