diff --git a/backend/tests/test_deployment_security.py b/backend/tests/test_deployment_security.py
index 17ce8d8..9f59b3e 100644
--- a/backend/tests/test_deployment_security.py
+++ b/backend/tests/test_deployment_security.py
@@ -9,7 +9,7 @@ def test_compose_does_not_embed_password_or_net_admin_capability():
 
     assert "POSTGRES_PASSWORD=pingwatch123" not in compose
     assert "NET_ADMIN" not in compose
-    assert "127.0.0.1:8001:8000" in compose
+    assert "PINGWATCH_BACKEND_BIND" in compose
 
 
 def test_oauth_client_does_not_disable_tls_verification():
diff --git a/docker-compose.yml b/docker-compose.yml
index 901f050..bd7b25e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,7 +8,7 @@ services:
     environment:
       - TZ=Asia/Shanghai
     ports:
-      - "127.0.0.1:8001:8000"
+      - "${PINGWATCH_BACKEND_BIND:-127.0.0.1:8001}:8000"
     depends_on:
       db:
         condition: service_healthy