diff --git a/apps/orchestrator/src/config/orchestrator.config.spec.ts b/apps/orchestrator/src/config/orchestrator.config.spec.ts
index c3f2263..fa2bfd2 100644
--- a/apps/orchestrator/src/config/orchestrator.config.spec.ts
+++ b/apps/orchestrator/src/config/orchestrator.config.spec.ts
@@ -54,6 +54,44 @@ describe("orchestratorConfig", () => {
     });
   });
 
+  describe("host binding", () => {
+    it("should default to 127.0.0.1 when no env vars are set", () => {
+      delete process.env.HOST;
+      delete process.env.BIND_ADDRESS;
+
+      const config = orchestratorConfig();
+
+      expect(config.host).toBe("127.0.0.1");
+    });
+
+    it("should use HOST env var when set", () => {
+      process.env.HOST = "0.0.0.0";
+      delete process.env.BIND_ADDRESS;
+
+      const config = orchestratorConfig();
+
+      expect(config.host).toBe("0.0.0.0");
+    });
+
+    it("should use BIND_ADDRESS env var when HOST is not set", () => {
+      delete process.env.HOST;
+      process.env.BIND_ADDRESS = "192.168.1.100";
+
+      const config = orchestratorConfig();
+
+      expect(config.host).toBe("192.168.1.100");
+    });
+
+    it("should prefer HOST over BIND_ADDRESS when both are set", () => {
+      process.env.HOST = "0.0.0.0";
+      process.env.BIND_ADDRESS = "192.168.1.100";
+
+      const config = orchestratorConfig();
+
+      expect(config.host).toBe("0.0.0.0");
+    });
+  });
+
   describe("other config values", () => {
     it("should use default port when ORCHESTRATOR_PORT is not set", () => {
       delete process.env.ORCHESTRATOR_PORT;
diff --git a/apps/orchestrator/src/config/orchestrator.config.ts b/apps/orchestrator/src/config/orchestrator.config.ts
index ead5fa2..8533a38 100644
--- a/apps/orchestrator/src/config/orchestrator.config.ts
+++ b/apps/orchestrator/src/config/orchestrator.config.ts
@@ -1,6 +1,7 @@
 import { registerAs } from "@nestjs/config";
 
 export const orchestratorConfig = registerAs("orchestrator", () => ({
+  host: process.env.HOST ?? process.env.BIND_ADDRESS ?? "127.0.0.1",
   port: parseInt(process.env.ORCHESTRATOR_PORT ?? "3001", 10),
   valkey: {
     host: process.env.VALKEY_HOST ?? "localhost",
diff --git a/apps/orchestrator/src/main.ts b/apps/orchestrator/src/main.ts
index 12a497f..146f973 100644
--- a/apps/orchestrator/src/main.ts
+++ b/apps/orchestrator/src/main.ts
@@ -10,10 +10,11 @@ async function bootstrap() {
   });
 
   const port = process.env.ORCHESTRATOR_PORT ?? 3001;
+  const host = process.env.HOST ?? process.env.BIND_ADDRESS ?? "127.0.0.1";
 
-  await app.listen(Number(port), "0.0.0.0");
+  await app.listen(Number(port), host);
 
-  logger.log(`🚀 Orchestrator running on http://0.0.0.0:${String(port)}`);
+  logger.log(`🚀 Orchestrator running on http://${host}:${String(port)}`);
 }
 
 void bootstrap();