commit af2304508232bbd916bba71ad002c314f9de9c22
parent 7f6c57db4830c5b1d69a3d35cf5578a0ea66a4ed
Author: Christian Grothoff <christian@grothoff.org>
Date: Sat, 31 Oct 2026 13:11:04 +0100
dual-stack bind by default
Diffstat:
3 files changed, 18 insertions(+), 6 deletions(-)
diff --git a/contrib/bank.conf b/contrib/bank.conf
@@ -70,8 +70,12 @@ SERVE = tcp
# Port on which the HTTP server listens, e.g. 9967. Only used if SERVE is tcp.
PORT = 8080
-# Which IP address should we bind to? E.g. ``127.0.0.1`` or ``::1``for loopback. Can also be given as a hostname. Only used if SERVE is tcp.
-BIND_TO = 0.0.0.0
+# Which IP address should we bind to? The default ``::`` accepts clients over
+# both IP versions; ``::1`` or ``127.0.0.1`` restrict the service to loopback.
+# Note that ``0.0.0.0`` serves IPv4 clients only, so a client that resolves our
+# name to an IPv6 address first does not reach us at all. Only used if SERVE
+# is tcp.
+BIND_TO = ::
# Which unix domain path should we bind to? Only used if SERVE is unix.
# UNIXPATH = libeufin-bank.sock
diff --git a/contrib/nexus.conf b/contrib/nexus.conf
@@ -99,8 +99,12 @@ SERVE = tcp
# Port on which the HTTP server listens, e.g. 9967. Only used if SERVE is tcp.
PORT = 8080
-# Which IP address should we bind to? E.g. ``127.0.0.1`` or ``::1``for loopback. Can also be given as a hostname. Only used if SERVE is tcp.
-BIND_TO = 0.0.0.0
+# Which IP address should we bind to? The default ``::`` accepts clients over
+# both IP versions; ``::1`` or ``127.0.0.1`` restrict the service to loopback.
+# Note that ``0.0.0.0`` serves IPv4 clients only, so a client that resolves our
+# name to an IPv6 address first does not reach us at all. Only used if SERVE
+# is tcp.
+BIND_TO = ::
# Which unix domain path should we bind to? Only used if SERVE is unix.
# UNIXPATH = libeufin-nexus.sock
diff --git a/libeufin-ebisync/ebisync.conf b/libeufin-ebisync/ebisync.conf
@@ -75,8 +75,12 @@ SERVE = tcp
# Port on which the HTTP server listens, e.g. 9967. Only used if SERVE is tcp.
PORT = 8080
-# Which IP address should we bind to? E.g. ``127.0.0.1`` or ``::1``for loopback. Can also be given as a hostname. Only used if SERVE is tcp.
-BIND_TO = 0.0.0.0
+# Which IP address should we bind to? The default ``::`` accepts clients over
+# both IP versions; ``::1`` or ``127.0.0.1`` restrict the service to loopback.
+# Note that ``0.0.0.0`` serves IPv4 clients only, so a client that resolves our
+# name to an IPv6 address first does not reach us at all. Only used if SERVE
+# is tcp.
+BIND_TO = ::
# Which unix domain path should we bind to? Only used if SERVE is unix.
# UNIXPATH = libeufin-ebisync.sock
