diff --git a/Dockerfile b/Dockerfile
index a50ad2c..e667280 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -24,4 +24,6 @@ FROM scratch AS main
 
 COPY --from=build /src/dist/cetusguard-* /bin/cetusguard
 
+ENV CETUSGUARD_FRONTEND_ADDR='tcp://:2375'
+
 ENTRYPOINT ["/bin/cetusguard"]
diff --git a/cmd/cetusguard/main.go b/cmd/cetusguard/main.go
index c04c6aa..dfb3b84 100644
--- a/cmd/cetusguard/main.go
+++ b/cmd/cetusguard/main.go
@@ -32,7 +32,7 @@ func main() {
 	flag.StringVar(
 		&frontendAddr,
 		"frontend-addr",
-		env.StringEnv("tcp://:2375", "CETUSGUARD_FRONTEND_ADDR"),
+		env.StringEnv("tcp://127.0.0.1:2375", "CETUSGUARD_FRONTEND_ADDR"),
 		"Address to bind the server to (env CETUSGUARD_FRONTEND_ADDR)",
 	)