Demo
Demo

Knowledge base

www-ip verifiedcriticalWritten by the Hub

Addresses the console binds to

in the configuration this is a linewww-ip: 0.0.0.0

Local addresses the console is served on; the shipped value is every address the machine has.

Values

Values
local addresses
Default
0.0.0.0 · taken from the build
applying
restart required
where it can be set
in the config file · with a startup flag · as an environment variable

In detail

This is the directive that decides whether the panel is an internal tool or a public one. Bound to 0.0.0.0 on a node with public addresses — which is what both the package and our installer do — the console is reachable from anywhere, protected by a password that travels unencrypted. Binding it to a private address, or to loopback with access through a tunnel, costs nothing and removes the whole class of problem. Hub does not do that today, and the reason is honest rather than good: the operator opens the panel from their own browser, and a tunnel would have to be built for them.

What happens if you get it wrong

Bound to 0.0.0.0 on a public node without TLS.Console credentials cross the internet in clear text, and the panel — which can pause sending, rewrite messages and read message bodies — is exposed to anyone who finds the port.verified by experiment · inference
Bound to an address the operator cannot reach.The panel is unreachable and nothing says why; the engine starts normally.inference · inference