diff --git a/go/caddy/api-aaa/api-aaa.go b/go/caddy/api-aaa/api-aaa.go
index <HASH>..<HASH> 100644
--- a/go/caddy/api-aaa/api-aaa.go
+++ b/go/caddy/api-aaa/api-aaa.go
@@ -95,7 +95,7 @@ func buildApiAAAHandler(ctx context.Context) (ApiAAAHandler, error) {
 		apiAAA.webservicesBackend.SetUser(pfconfigdriver.Config.PfConf.Webservices.User, pfconfigdriver.Config.PfConf.Webservices.Pass)
 	}
 
-	url, err := url.Parse("http://localhost:8080/api/v1/authentication/admin_authentication")
+	url, err := url.Parse("http://127.0.0.1:8080/api/v1/authentication/admin_authentication")
 	sharedutils.CheckError(err)
 	apiAAA.authentication.AddAuthenticationBackend(aaa.NewPfAuthenticationBackend(ctx, url, false))
don't rely on localhost (use <I>) for API login