mirror of
https://github.com/MarekWo/mc-webui.git
synced 2026-11-03 09:12:19 +01:00
The guide has listed Access Lists under "Why bother" since it was written, but Step 5 covered only Force SSL, MC_TRUST_PROXY and MC_BIND_ADDRESS - all of which close the LAN route and none of which help an instance published to the internet. So the one step that matters most there was the one the reader had to invent. Adds the walkthrough, and draws the line between the two ideas the old text ran together: a login keeps strangers out, closing port 5000 stops the local network reaching the app around the proxy - and around the login. Notes that MC_BIND_ADDRESS binds the port to loopback rather than removing it, and that leaving it open is the right call when testers use the LAN address, as they do on this project's test server. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0187QpThw1Y8n7aYDjHtMHax