When upgrading Analytics or Notifications, the installer forcefully changes the allowed host parameter in the Configuration database for the application being installed. This should not happen. There should be an additional CLI parameter (and counterpart for the GUI) where you can specify the allowed host for each application.
PINOTIFICATIONS_ALLOWEDHOST
PIANALYSIS_ALLOWEDHOST
This is to protect WSFC installations, which account for the majority of Production systems. There is no reason whatsoever that you should have to modify these settings post-upgrade.