Whether the resolved bind host exposes the portal beyond loopback.
A non-loopback bind (e.g. 0.0.0.0 or a LAN address) makes the portal
reachable from the network, so session cookies and freshly typed secrets
traverse the wire unless a TLS reverse proxy fronts it. Callers use this to
emit a boot warning recommending HTTPS + PORTAL_SECURE_COOKIES.
Whether the resolved bind host exposes the portal beyond loopback.
A non-loopback bind (e.g.
0.0.0.0or a LAN address) makes the portal reachable from the network, so session cookies and freshly typed secrets traverse the wire unless a TLS reverse proxy fronts it. Callers use this to emit a boot warning recommending HTTPS +PORTAL_SECURE_COOKIES.