diff --git a/proxy.php b/proxy.php
index a54da56..1eb5b89 100644
--- a/proxy.php
+++ b/proxy.php
@@ -86,6 +86,8 @@ function startCoolwsd()
         $remoteFontConfig = "--o:remote_font_config.url=" . $remoteFontConfigUrl;
     }
 
+	$loopback = "--o:net.listen=loopback";
+
     // Check if IPv6 has been disabled
     $IPv4only = "";
     $launchCmd = "ip -6 addr";
@@ -102,7 +104,7 @@ function startCoolwsd()
     // when lok_allow does not contain the Nextcloud host, it is not possible to insert image from Nextcloud
     // we have to set explicitly, because storage.wopi.alias_groups[@mode] is 'first' in case of richdocumentscode
     $lok_allow = "--o:net.lok_allow.host[14]=" . escapeshellarg($_SERVER['HTTP_HOST']);
-    $launchCmd = "bash -c \"( $appImage $remoteFontConfig $IPv4only $lok_allow --pidfile=$pidfile || $appImage --appimage-extract-and-run $remoteFontConfig $IPv4only $lok_allow --pidfile=$pidfile) >/dev/null & disown\"";
+    $launchCmd = "bash -c \"( $appImage $remoteFontConfig $IPv4only $loopback $lok_allow --pidfile=$pidfile || $appImage --appimage-extract-and-run $remoteFontConfig $IPv4only $loopback $lok_allow --pidfile=$pidfile) >/dev/null & disown\"";
 
     // Remove stale lock file (just in case)
     if (file_exists("$lockfile"))