Airflow: default binding to world

Airflow comes with a default configuration of binding to world ( Binding to world ( can be dangerous in cases where the hosting machine is exposed, and in general it indicates a non-minimal security posture which can cause other unexpected exposures.


In airflow.cfg:

web_server_host =


In airflow.cfg, if under load balancer:

web_server_host =

Or, in airflow.cfg, if having specific interface address ADDR:

web_server_host = <ADDR>