diff --git a/deploy/env.template b/deploy/env.template
index fca288f..ecf3826 100644
--- a/deploy/env.template
+++ b/deploy/env.template
@@ -30,12 +30,16 @@
 NAVI_WEBCLIENT_ENABLED=false
 # navi_ui MCP serves the webclient only — off together with it.
 NAVI_UI_MCP_ENABLED=false
-# Trusted single-server module: auth off. The server binds 127.0.0.1 only
-# (NAVI_HOST below); remote terminals connect via SSH tunnel.
+# Trusted single-server module: auth off. The server is LAN-reachable
+# (NAVI_HOST below) for the swarm peer channel; it is still protected by
+# nothing else — the network must be trusted.
 NAVI_AUTH_ENABLED=false
 
-# Server bind (used by navi-server / the systemd unit)
-NAVI_HOST=127.0.0.1
+# Server bind (used by navi-server / the systemd unit).
+# 0.0.0.0 = reachable from the LAN: required for the swarm (peer ask/status
+# come INBOUND on 8099). Use 127.0.0.1 only on machines outside the swarm;
+# then remote terminals need an SSH tunnel.
+NAVI_HOST=0.0.0.0
 NAVI_PORT=8099
 
 # ─── Client profile ──────────────────────────────────────────────────