Block remote access for reverse proxy

[gautampk]

Issue description

I'd like to set Streama up so that it is only accessible directly via a local connection (i.e., a connection from 127.0.0.1:8080) and then use NGINX as a reverse proxy to be able to access Streama externally using my domain name and SSL certificates.

The NGINX part is working fine, but I can't figure out how to get Streama to reject non-local connections. The usual way I do this with most self-hosted things I have (Nextcloud, Airsonic, etc) is to set their port to be 127.0.0.1:xxx as opposed to 0.0.0.0:xxx, but I can't work out how to do this for Streama. Currently I am able to access it over the Internet directly using [server IP]:8080 on a bog standard HTTP connection which is not really ideal.

Environment Information

• Operating System: Ubuntu
• Streama version: 1.10.4
• Custom streama build, describe customizations or provide link to fork (If Applicable): N/A
• Container Version (If Applicable): N/A

[kille]

Moin,

I'm configuring my services the same way. To do this for Streama, you just have to add some lines to the application.yml

environments:
  production:
    server:
      port: 8888
      address: 127.0.0.1

Of cource port and address is up to you ;-)

Greetings
Chris