# Error: connect ECONNREFUSED when reaching the zrok dashboard at port 18080 **URL:** \ **Category:** zrok\ **Created:** [May 19, 2024, 10:05pm UTC](https://openziti.discourse.group/t/error-connect-econnrefused-when-reaching-the-zrok-dashboard-at-port-18080/2586 "2024-05-19T22:05:27Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![sbansal793](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/sbansal793/32/2075_2.png) [@sbansal793](https://openziti.discourse.group/u/sbansal793)\ **Post date:** [May 19, 2024, 10:05pm UTC](https://openziti.discourse.group/t/error-connect-econnrefused-when-reaching-the-zrok-dashboard-at-port-18080/2586/1 "2024-05-19T22:05:27Z")
We have self hosted zrok by following the tutorial mentioned exactly at [Self-hosting guide for Docker | Zrok](https://docs.zrok.io/docs/guides/self-hosting/docker/). We even set our wildcard subdomain correctly. We did not set up for caddy as we do not want TLS. When we reach out to our deployed instance at [http://zrok.metal.podiumpe.com:18080](http://zrok.metal.podiumpe.com:18080) it shows connection refused with the IP of the machine where the zrok is deployed. When we ran docker compose logs zrok-frontend we saw the first few lines as:- INFO ziti/ziti/cmd/helpers.StandardErrorMessage: Connection error: Get [https://ziti.metal.podiumpe.com:1280/.well-known/est/cacerts:](https://ziti.metal.podiumpe.com:1280/.well-known/est/cacerts:) dial tcp 172.27.0.2:1280: connect: connection refused I don't why it is looking for https version of ziti. We did not set up any TLS. There is an issue with the tutorial. It is missing something ---
**Author:** ![sbansal793](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/sbansal793/32/2075_2.png) [@sbansal793](https://openziti.discourse.group/u/sbansal793)\ **Post date:** [May 20, 2024, 12:44am UTC](https://openziti.discourse.group/t/error-connect-econnrefused-when-reaching-the-zrok-dashboard-at-port-18080/2586/2 "2024-05-20T00:44:02Z")
@TheLumberjack I created a PR ([127.0.0.1 was restrictive by many cloud provider. When attatching DNS… by maverick-ai · Pull Request #627 · openziti/zrok · GitHub](https://github.com/openziti/zrok/pull/627)) to solve this issue. It significantly hinders deployment in some cloud providers. You can merge my PR . ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [May 20, 2024, 11:52am UTC](https://openziti.discourse.group/t/error-connect-econnrefused-when-reaching-the-zrok-dashboard-at-port-18080/2586/3 "2024-05-20T11:52:39Z")
Hi @sbansal793, welcome to the community and to OpenZiti. I took a quick look at the PR and it seems like you have gotten things working for yourself that's great! I'm not sure what Ken had in mind with using 127.0.0.1 in that way, but I'm sure it was a good reason. I'll loop up with him and one of us will take a look and comment/approve the pr. Thanks again for the pr, happy zrok'ing! 🙂 ---
**Author:** ![qrkourier](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/qrkourier/32/52_2.png) [@qrkourier](https://openziti.discourse.group/u/qrkourier)\ **Post date:** [May 20, 2024, 1:30pm UTC](https://openziti.discourse.group/t/error-connect-econnrefused-when-reaching-the-zrok-dashboard-at-port-18080/2586/4 "2024-05-20T13:30:34Z")
@sbansal793 Thanks for the suggestion to change the default listening interface from loopback to all. You made the correct change to accept the risks of running zrok insecurely and publish zrok's API and frontend ports without TLS. I thought it's best to let zrok's non-TLS servers listen only on loopback because I guessed users would be disappointed if the default was not secure. What do you think of this change to set the insecure ports listening interface with a variable `ZROK_INSECURE_INTERFACE`? I made a PR here: [clarify no-TLS option by qrkourier · Pull Request #628 · openziti/zrok · GitHub](https://github.com/openziti/zrok/pull/628) ---
**Author:** ![sbansal793](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/sbansal793/32/2075_2.png) [@sbansal793](https://openziti.discourse.group/u/sbansal793)\ **Post date:** [May 20, 2024, 1:43pm UTC](https://openziti.discourse.group/t/error-connect-econnrefused-when-reaching-the-zrok-dashboard-at-port-18080/2586/5 "2024-05-20T13:43:20Z")
@qrkourier That is a very good way to do it. ---
**Author:** ![sbansal793](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/sbansal793/32/2075_2.png) [@sbansal793](https://openziti.discourse.group/u/sbansal793)\ **Post date:** [May 20, 2024, 4:00pm UTC](https://openziti.discourse.group/t/error-connect-econnrefused-when-reaching-the-zrok-dashboard-at-port-18080/2586/6 "2024-05-20T16:00:20Z")
@qrkourier You would also need to update the tutorial for self-hosting.