ttyd listens by default on tcp 7681 on ALL interfaces, IPv4/IPv6, without any firewall rules.

[R-Adrian]

cross-post from openwrt/packages#3271

please use secure defaults if ttyd is started without any configuration

make it work only via https TLS 1.2/1.3, without http and change it so by default it listens only on local-network and only on IPv4 reserved-local addresses. This could be changed later from configuration, but the defaults should not allow access from outside the local network.

[tsl0922]

Closing this issue in favor of the openwrt side.