--server-prometheus-bind-address

Moves /metrics to its own TCP listener at this address instead of the main server listener. Use it to keep metrics on a private interface that Prometheus can scrape while the render API stays on its own interface. The endpoint is removed from the main listener when this is set.

Requires --server-prometheus-bind-port; the two must be set together. TCP only — Unix sockets are not supported for the metrics listener. Protect the endpoint with --server-prometheus-auth when the interface is reachable.

Enterprise license. Requires --server-enable-prometheus.