From e4f346182b9389cfc9e4c6ebe4ac3320c7e99d2a Mon Sep 17 00:00:00 2001
From: Kishi85 <git@eightyfive.net>
Date: Thu, 2 Dec 2021 14:24:38 +0100
Subject: [PATCH] Properly restrict allowed hosts

---
 roles/mail/templates/mailman/mailman-web.py.j2 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/mail/templates/mailman/mailman-web.py.j2 b/roles/mail/templates/mailman/mailman-web.py.j2
index 3f118fa..bcb0c5f 100644
--- a/roles/mail/templates/mailman/mailman-web.py.j2
+++ b/roles/mail/templates/mailman/mailman-web.py.j2
@@ -16,7 +16,8 @@ ALLOWED_HOSTS = [
     #"localhost",  # Archiving API from Mailman, keep it.
     # "lists.your-domain.org",
     # Add here all production URLs you may have.
-    '*'
+    'localhost',
+    '{{ mailman_domain }}'
 ]
 
 # Mailman API credentials