bind-interfaces
except-interface=lxdbr0