Skip to content

Default server bind on all interfaces #23

Description

@pimlock

Summary

The server's default bind address is 0.0.0.0:8080, so it listens on all interfaces unless explicitly overridden. Whether the service is exposed to the internet or only to an internal network is entirely a matter of deployment. A misconfiguration could expose the server more broadly than intended.

Source Code

  • The default is set in crates/navigator-core/src/config.rs in default_bind_address() (lines 93-94), which returns "0.0.0.0:8080".parse().expect(...).
  • The server uses this in crates/navigator-server/src/lib.rs at line 140: TcpListener::bind(config.bind_address).

Originally by @drew on 2026-02-19T08:59:26.615-08:00

Activity

  1. added this to the march-mvp milestone on Feb 27, 2026
  2. self-assigned this
    on Mar 6, 2026
  3. added a commit that references this issue on Apr 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions