Baseline · Exposure & network
A-01 Admin console binds to localhost by default
criticalnetwork · auto
Why it matters
Listens on 127.0.0.1 by default, not 0.0.0.0; never exposes itself to the public internet.
How to test
Access the admin port from another machine or the public internet and see if it responds.
How to fix
Bind to 127.0.0.1; reach it remotely via an SSH tunnel or an authenticated reverse proxy.