diff --git a/apps/www/src/app/api/og/[slug]/route.tsx b/apps/www/src/app/api/og/[slug]/route.tsx
index 3cb16de3..f11f804c 100644
--- a/apps/www/src/app/api/og/[slug]/route.tsx
+++ b/apps/www/src/app/api/og/[slug]/route.tsx
@@ -6,7 +6,7 @@ export const runtime = "edge";
 
 const ALLOWED_HOSTS = new Set([
   "archgw-tau.vercel.app",
-  "plano.katanemo.com",
+  "planoai.dev",
   "localhost",
 ]);
 
diff --git a/apps/www/src/app/blog/[slug]/layout.tsx b/apps/www/src/app/blog/[slug]/layout.tsx
index fd463292..942d61c6 100644
--- a/apps/www/src/app/blog/[slug]/layout.tsx
+++ b/apps/www/src/app/blog/[slug]/layout.tsx
@@ -47,7 +47,7 @@ export async function generateMetadata({
     }
 
     // Get baseUrl - use NEXT_PUBLIC_APP_URL if set, otherwise construct from VERCEL_URL
-    // Restrict to allowed hosts: localhost:3000, archgw-tau.vercel.app, or plano.katanemo.com
+    // Restrict to allowed hosts: localhost:3000, archgw-tau.vercel.app, or planoai.dev
     let baseUrl = "http://localhost:3000";
 
     if (process.env.NEXT_PUBLIC_APP_URL) {
@@ -55,7 +55,7 @@ export async function generateMetadata({
         const parsed = new URL(process.env.NEXT_PUBLIC_APP_URL);
         const allowedHosts = new Set([
           "archgw-tau.vercel.app",
-          "plano.katanemo.com",
+          "planoai.dev",
           "localhost",
         ]);
         if (allowedHosts.has(parsed.hostname)) {
@@ -68,7 +68,7 @@ export async function generateMetadata({
       const hostname = process.env.VERCEL_URL;
       if (
         hostname === "archgw-tau.vercel.app" ||
-        hostname === "plano.katanemo.com"
+        hostname === "planoai.dev"
       ) {
         baseUrl = `https://${hostname}`;
       }
diff --git a/cli/planoai/main.py b/cli/planoai/main.py
index 4005d77a..a93e4c4d 100644
--- a/cli/planoai/main.py
+++ b/cli/planoai/main.py
@@ -45,7 +45,7 @@ def _is_port_in_use(port: int) -> bool:
 
     with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
         try:
-            s.bind(("127.0.0.1", port))
+            s.bind(("0.0.0.0", port))  # noqa: S104
             return False
         except OSError:
             return True