Handbook
Enterprise — network binding
Lenses defaults to loopback so POST surfaces are not reachable from LAN accidentally. Widening the listener is an explicit operator choice documented alongside Security and local-first.
Updated
What it is
Lenses defaults to loopback so POST surfaces are not reachable from LAN accidentally. Widening the listener is an explicit operator choice documented alongside Security and local-first.
Modes
| Mode | Behavior |
|---|---|
Default (127.0.0.1) |
Same-host browsers and tools reach Lenses; LAN hosts cannot open /api without tunnels. |
--bind-all-interfaces |
Listener on all interfaces — combine with firewall rules and OIDC/session gates before exposing broadly. |
Prefer terminating TLS on a reverse proxy you operate; avoid forwarding raw Authorization headers from untrusted clients.
Verify
ss -lptn shows loopback-only binds unless you intentionally widened them.