diff --git a/hosts/sid/services/step-ca.nix b/hosts/sid/services/step-ca.nix
index 20fcae3..f004d65 100644
--- a/hosts/sid/services/step-ca.nix
+++ b/hosts/sid/services/step-ca.nix
@@ -11,7 +11,7 @@ in
 {
   services.step-ca = {
     enable = true;
-    address = "0.0.0.0";
+    address = "127.0.0.1";
     port = 8443;
     openFirewall = true;
     intermediatePasswordFile = config.sops.secrets."step-ca/password".path;