Default bind exposes Nomad HTTP API and UI to all interfaces
Nomad server and client HTTP listeners default to binding on all local addresses when no bind address is set. That default can make the management API and the optional UI reachable from unintended networks. The UI and API share a single listener by default, so enabling the UI for operator access also exposes the API port on the same addresses. ACL enforcemen
nomad