Apache and Nginx should only allow localhost by default

Just to make sure people don't just copy/paste this stuff.