diff --git a/docker-compose.yaml b/docker-compose.yaml
index eaf947cb3952defcd3120208dbdce1d924b28350..447a1474b73025749694b255c529f3f0aa139d65 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -10,11 +10,18 @@ services:
     environment:
       - IPFS_PATH=/data/ipfs
     ports:
+      # Swarm listens on all interfaces, so is remotely reachable.
       - 4001:4001/tcp
       - 4001:4001/udp
-      - 5001:5001
-      - 8080:8080
-      - 8081:8081
+      
+      # The following ports only listen on the loopback interface, so are not remotely reachable by default.
+      # If you want to override these or add more ports, see https://docs.docker.com/compose/extends/ .
+      
+      # API port, which includes admin operations, so you probably don't want this remotely accessible.
+      - 127.0.0.1:5001:5001
+      
+      # HTTP Gateway
+      - 127.0.0.1:8080:8080
 volumes:
   ipfs_path:
   ipfs_fuse: