Timmy_Foundation/timmy-academy
15
0
Fork 0
Code Issues 5 Pull Requests 6 Actions Packages Projects Releases Wiki Activity

fix: bind telnet and web client to localhost only (#9)

Browse Source 
Security fix: Change from 0.0.0.0 to 127.0.0.1 for both TELNET_INTERFACES
and WEBSERVER_INTERFACES. Prevents unauthorized external access.

Added docs/SECURITY.md with:
- TLS setup instructions (nginx, caddy)
- SSH tunnel for development
- Firewall rules if external access needed

Closes #9.
This commit is contained in:
Alexander Whitestone
2026-04-15 12:36:56 -04:00
parent 0aa6699356
commit d7ca9c8c83
2 changed files with 109 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
server/conf/settings.py
View File

@@ -35,7 +35,7 @@ from evennia.settings_default import *
SERVERNAME = "Timmy Academy - The Wizard's Canon"
######################################################################
# Connection settings for fleet access
# Connection settings
######################################################################
# Telnet port (standard MUD)
@@ -44,9 +44,15 @@ TELNET_PORTS = [4000]
# Web client port
WEBSERVER_PORTS = [(4001, 4005)]
# Allow external connections (0.0.0.0 listens on all interfaces)
TELNET_INTERFACES = ['0.0.0.0']
WEBSERVER_INTERFACES = ['0.0.0.0']
# Bind to localhost only for security.
# For external access, use a reverse proxy (nginx/caddy) with TLS.
# See docs/SECURITY.md for TLS setup instructions.
TELNET_INTERFACES = ['127.0.0.1']
WEBSERVER_INTERFACES = ['127.0.0.1']
# To allow external connections (NOT RECOMMENDED without TLS):
# TELNET_INTERFACES = ['0.0.0.0']
# WEBSERVER_INTERFACES = ['0.0.0.0']
# Web client enabled
WEBSERVER_ENABLED = True