only listen to localhost for default config