diff --git a/ops/compose/production.env.example b/ops/compose/production.env.example
index bd91b8f6..0ae0abfe 100644
--- a/ops/compose/production.env.example
+++ b/ops/compose/production.env.example
@@ -10,3 +10,9 @@ AURORA_TENANT_URL=https://dinglebear.ai
 
 # Used only when rendering the tracked SWAG templates on squirts.
 AURORA_UPSTREAM_HOST=dookie.manatee-triceratops.ts.net
+
+# Optional second bind for direct (non-proxied) access on another interface.
+# Must differ from AURORA_BIND_ADDRESS and neither may be 0.0.0.0, or the two
+# port bindings collide and docker compose up fails. Set the real address in
+# the untracked production.env.
+AURORA_LAN_BIND_ADDRESS=127.0.0.1
diff --git a/ops/compose/production.yaml b/ops/compose/production.yaml
index 1af104c9..a7509156 100644
--- a/ops/compose/production.yaml
+++ b/ops/compose/production.yaml
@@ -7,6 +7,7 @@ services:
     container_name: aurora
     ports:
       - "${AURORA_BIND_ADDRESS:?AURORA_BIND_ADDRESS is required}:${AURORA_PUBLIC_PORT:-50000}:3000"
+      - "${AURORA_LAN_BIND_ADDRESS:-127.0.0.1}:${AURORA_PUBLIC_PORT:-50000}:3000"
     environment:
       NODE_ENV: production
       NEXT_TELEMETRY_DISABLED: "1"