diff --git a/README.md b/README.md
index 4c818d31..08825e80 100644
--- a/README.md
+++ b/README.md
@@ -82,6 +82,7 @@ These options can be configured by setting environment variables using `-e KEY="
 | Env | Default | Example | Description |
 | - | - | - | - |
 | `PORT` | `51821` | `6789` | TCP port for Web UI. |
+| `WEBUI_HOST` | `0.0.0.0` | `localhost` | IP address web UI binds to. |
 | `PASSWORD` | - | `foobar123` | When set, requires a password when logging in to the Web UI. |
 | `WG_HOST` | - | `vpn.myserver.com` | The public hostname of your VPN server. |
 | `WG_DEVICE` | `eth0` | `ens6f0` | Ethernet device the wireguard traffic should be forwarded through. |
diff --git a/src/config.js b/src/config.js
index 30f9221c..3281523f 100644
--- a/src/config.js
+++ b/src/config.js
@@ -4,6 +4,7 @@ const { release } = require('./package.json');
 
 module.exports.RELEASE = release;
 module.exports.PORT = process.env.PORT || 51821;
+module.exports.WEBUI_HOST = process.env.WEBUI_HOST || '0.0.0.0';
 module.exports.PASSWORD = process.env.PASSWORD;
 module.exports.WG_PATH = process.env.WG_PATH || '/etc/wireguard/';
 module.exports.WG_DEVICE = process.env.WG_DEVICE || 'eth0';
diff --git a/src/lib/Server.js b/src/lib/Server.js
index ff8c494e..35e8e9b1 100644
--- a/src/lib/Server.js
+++ b/src/lib/Server.js
@@ -12,6 +12,7 @@ const WireGuard = require('../services/WireGuard');
 
 const {
   PORT,
+  WEBUI_HOST,
   RELEASE,
   PASSWORD,
 } = require('../config');
@@ -135,8 +136,8 @@ module.exports = class Server {
         return WireGuard.updateClientAddress({ clientId, address });
       }))
 
-      .listen(PORT, () => {
-        debug(`Listening on http://0.0.0.0:${PORT}`);
+      .listen(PORT, WEBUI_HOST, () => {
+        debug(`Listening on http://${WEBUI_HOST}:${PORT}`);
       });
   }