diff --git a/.env.example b/.env.example
index 4e875a6..361ceed 100644
--- a/.env.example
+++ b/.env.example
@@ -1,5 +1,6 @@
 CONTROLLER_IMAGE=ghcr.io/slub/ocrd_controller:latest
 CONTROLLER_HOST=ocrd-controller
+CONTROLLER_PORT_SSH=8022
 CONTROLLER_ENV_UID=1001
 CONTROLLER_ENV_GID=1001
 CONTROLLER_ENV_UMASK=0002
diff --git a/docker-compose.yml b/docker-compose.yml
index cdccdda..3dbde81 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -18,8 +18,8 @@ services:
       - UMASK=${CONTROLLER_ENV_UMASK}
       - WORKERS=${CONTROLLER_WORKERS}
 
-    expose:
-      - "22"
+    ports:
+      - ${CONTROLLER_PORT_SSH}:22
 
     volumes:
       - type: bind