specify listen address (should be localhost for proxying)