diff --git a/changelog.d/5568.feature b/changelog.d/5568.feature
new file mode 100644
index 0000000000000000000000000000000000000000..59b9e5f96dc9b17eb1b161e3bae21456fffe1a13
--- /dev/null
+++ b/changelog.d/5568.feature
@@ -0,0 +1 @@
+Docker image: open the non-TLS port by default.
diff --git a/docker/start.py b/docker/start.py
index 89ec9ebaf8cc2dd5892ba8b9207b6bcf52597131..2a13308dae208725405b11d0f324f08f481c9594 100755
--- a/docker/start.py
+++ b/docker/start.py
@@ -164,6 +164,7 @@ def run_generate_config(environ, ownership):
         "--data-directory",
         data_dir,
         "--generate-config",
+        "--open-private-ports",
     ]
     # log("running %s" % (args, ))
     os.execv("/usr/local/bin/python", args)