add bind feature

cmd/rdpgw/config/configuration.go

@@ -82,6 +82,7 @@ type Configuration struct {
 type ServerConfig struct {
 	GatewayAddress       string   `koanf:"gatewayaddress"`
 	Port                 int      `koanf:"port"`
+	BindAddress          string   `koanf:"bindaddress"`
 	CertFile             string   `koanf:"certfile"`
 	KeyFile              string   `koanf:"keyfile"`
 	Hosts                []string `koanf:"hosts"`
@@ -215,6 +216,7 @@ func Load(configFile string) Configuration {
 	k.Load(confmap.Provider(map[string]interface{}{
 		"Server.Tls":                 "auto",
 		"Server.Port":                443,
+		"Server.BindAddress":         "",
 		"Server.SessionStore":        "cookie",
 		"Server.HostSelection":       "roundrobin",
 		"Server.Authentication":      "openid",

cmd/rdpgw/main.go

@@ -5,6 +5,7 @@ import (
 	"crypto/tls"
 	"fmt"
 	"log"
+	"net"
 	"net/http"
 	"net/url"
 	"os"
@@ -326,7 +327,7 @@ func main() {
 
 	// setup server
 	server := http.Server{
-		Addr:         ":" + strconv.Itoa(conf.Server.Port),
+		Addr:         net.JoinHostPort(conf.Server.BindAddress, strconv.Itoa(conf.Server.Port)),
 		Handler:      r,
 		TLSConfig:    cfg,
 		TLSNextProto: make(map[string]func(*http.Server, *tls.Conn, http.Handler)), // disable http2

dev/docker/rdpgw.yaml

@@ -3,6 +3,10 @@ Server:
  KeyFile: /opt/rdpgw/key.pem
  GatewayAddress: localhost:9443
  Port: 9443
+ # BindAddress: ""           # Binds to all interfaces (default)
+ # BindAddress: "127.0.0.1"  # Localhost only (IPv4)
+ # BindAddress: "::1"        # Localhost only (IPv6)
+ # BindAddress: "192.168.1.10"  # Specific IP
  Hosts:
   - xrdp:3389
  RoundRobin: false