fix: change localhost to 0.0.0.0 for external access