better host address

README.md

@@ -37,9 +37,9 @@ available.
    # Edit .env with the bridge IP and application key.
    docker compose up --build -d
    ```
-4. Open [Grafana](http://localhost:3000) and sign in with `admin` / `admin`. The
+4. Open Grafana at `http://HOST_LAN_IP:3000` and sign in with `admin` / `admin`. The
    dashboard is in the **Hue** folder. Change this development password if the port
-   will ever be exposed beyond localhost.
+   is reachable by anyone else on your network.
 
 Useful local endpoints:
 
@@ -47,7 +47,11 @@ Useful local endpoints:
 - VictoriaMetrics UI: <http://localhost:8428/vmui/>
 - Grafana: <http://localhost:3000>
 
-All published ports bind to `127.0.0.1`. Named Docker volumes retain metrics and
+By default, published ports bind to `0.0.0.0`, making them reachable through the
+host's `192.168.178.x` address. Docker cannot bind to a wildcard subnet such as
+`192.168.178.*`; to listen only on the LAN interface, set `PUBLISH_ADDRESS` in `.env`
+to the host's exact address, for example `192.168.178.42`. Ensure your host firewall
+permits access only from trusted networks. Named Docker volumes retain metrics and
 Grafana state across restarts. TLS verification is off by default because Hue bridges
 normally use a self-signed certificate; set `HUE_VERIFY_TLS=true` if yours has a
 trusted certificate.