nixos: graphite, listen on localhost by default

This is just a security fix for default settings to listen on localhost by default