Is there a way to stop Rails' built-in server from listening on 0.0.0.0 by default?

Question

I do a lot of web development on untrusted networks (coffeeshops, the neighbors\' open wifi, DEF CON), and I get twitchy when random, assuredly buggy software (my Rails app

Answer 1

Use the --binding=ip parameter:

rails s --binding=127.0.0.1

https://github.com/rails/rails/blob/master/railties/lib/rails/commands/server.rb

Answer 2

You can update the /script/rails file in you rails app to reflect the following:

#!/usr/bin/env ruby
# This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.

APP_PATH = File.expand_path('../../config/application',  __FILE__)
require File.expand_path('../../config/boot',  __FILE__)

# START NEW CODE
require "rails/commands/server"
module Rails
  class Server
    def default_options
      super.merge({
        :Host        => 'my-host.com',
        :Port        => 3000,
        :environment => (ENV['RAILS_ENV'] || "development").dup,
        :daemonize   => false,
        :debugger    => false,
        :pid         => File.expand_path("tmp/pids/server.pid"),
        :config      => File.expand_path("config.ru")            
      })
    end
  end
end
# END NEW CODE

require 'rails/commands'

This will bind the rails app to my-host.com when it starts up. You can still override the options from the command line.

I am not sure why this is not reflected in the Rails::Server API docs. You can have a look at https://github.com/rails/rails/blob/master/railties/lib/rails/commands/server.rb to see the server implementation.

Note that in Rails 4, the /script/rails file has been moved to /bin/rails.

Answer 3

There's no way to change it globally, you'll have to use -b.

rails s -b <ip address>