dashboard
TCP port the operational dashboard listens on. Deliberately separate from the admin port so the dashboard can be firewalled independently of the k8s probe endpoints (/ping, /healthcheck). -1 means "fall back to DASHBOARD_PORT env var, then proxy.dashboard.port config (default 8094)".