diff --git a/changelog.d/5568.feature b/changelog.d/5568.feature
new file mode 100644
index 000000000..59b9e5f96
--- /dev/null
+++ b/changelog.d/5568.feature
@@ -0,0 +1 @@
+Docker image: open the non-TLS port by default.
diff --git a/docker/start.py b/docker/start.py
index 89ec9ebaf..2a13308da 100755
--- a/docker/start.py
+++ b/docker/start.py
@@ -164,6 +164,7 @@ def run_generate_config(environ, ownership):
         "--data-directory",
         data_dir,
         "--generate-config",
+        "--open-private-ports",
     ]
     # log("running %s" % (args, ))
     os.execv("/usr/local/bin/python", args)