#bind-address

Default bind exposes Nomad HTTP API and UI to all interfaces

Nomad server and client HTTP listeners default to binding on all local addresses when no bind address is set. That default can make the management API and the optional UI reachable from unintended networks. The UI and API share a single listener by default, so enabling the UI for operator access also exposes the API port on the same addresses. ACL enforcemen

Community & Careers · Editorial question

network-exposureaclnomad