httpd - allowed_hosts

[zvekan]

OS : win2025

I want to block access to web interface from anywhere except from server where sftpgo is installed.

I have added next

        "security": {
          "enabled": true,
          "allowed_hosts": ["127.0.0.1","localhost","::1"],

But then I receive next error on same machine > "You are not allowed to connect" when I try to connect http://localhost:8080/web/admin/login

Do you have idea what I'm missing?

[drakkan]

You have to match the Host header

[zvekan]

thank you for help.

If I set next it is working then.

"allowed_hosts": ["localhost:8080"],

I never tried to add port under host part.
Maybe to add that part under documentation or change how check is done.