Default configuration binds to public ip when no private ip available

As reported in #2295, we allow access from your public ip address if you do not have a private one available. This isn't a good default.

To remedy this, we should make sure the address passes:
```js
/^(10|172|192)[.]/ || /^fd\w{2}:/
```