@jmillar is right. It has been done this way to allow backend containers to run on another server.
But there is always place for improvement and it’s one of the open issues. https://github.com/kobotoolbox/kobo-install/issues/57.
Using a firewall is strongly recommended.
