diff --git a/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb b/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb
index b70f2fb..4cd8622 100644
--- a/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb
+++ b/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb
@@ -4,6 +4,8 @@ services:
     volumes:
       - /opt/step-ca/data:/home/step
       - /opt/step-ca/init/secrets:/init-secrets
+    ports:
+      - 9000:9000
     environment:
       - DOCKER_STEPCA_INIT_NAME=sunet-cdn-ca
       - DOCKER_STEPCA_INIT_DNS_NAMES=localhost,<%= @networking['fqdn'] %>