bind nouveau to localhost only by default
diff --git a/java/nouveau/nouveau.yaml b/java/nouveau/nouveau.yaml
index a6bd00f..49c9a4e 100644
--- a/java/nouveau/nouveau.yaml
+++ b/java/nouveau/nouveau.yaml
@@ -8,8 +8,13 @@
   applicationConnectors:
     - type: h2c
       port: 8080
+      bindHost: 127.0.0.1
       maxConcurrentStreams: 1024
       initialStreamRecvWindow: 65535
+  adminConnectors:
+    - type: h2c
+      port: 8081
+      bindHost: 127.0.0.1
   gzip:
     includedMethods:
       - GET