From 6fa575cf4f33331ab87305314e59ebf15629013f Mon Sep 17 00:00:00 2001
From: Alex Ling <hkalexling@gmail.com>
Date: Wed, 3 Mar 2021 16:28:31 +0000
Subject: [PATCH] Bind localhost when a proxy auth header is set

---
 src/server.cr | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/server.cr b/src/server.cr
index 9d9cefa..76296bd 100644
--- a/src/server.cr
+++ b/src/server.cr
@@ -49,6 +49,9 @@ class Server
     {% if flag?(:release) %}
       Kemal.config.env = "production"
     {% end %}
+    unless Config.current.auth_proxy_header_name.empty?
+      Kemal.config.host_binding = "127.0.0.1"
+    end
     Kemal.config.port = Config.current.port
     Kemal.run
   end