diff --git a/deploy/docker/supervisord.conf b/deploy/docker/supervisord.conf
index a1b994aa2..fe0975f89 100644
--- a/deploy/docker/supervisord.conf
+++ b/deploy/docker/supervisord.conf
@@ -4,7 +4,7 @@ logfile=/dev/null               ; Log supervisord output to stdout/stderr
 logfile_maxbytes=0
 
 [program:redis]
-command=/usr/bin/redis-server --loglevel notice ; Path to redis-server on Alpine
+command=/usr/bin/redis-server --bind 127.0.0.1 --loglevel notice ; Bind to localhost only — prevents exposure when using network_mode: host
 user=appuser                    ; Run redis as our non-root user
 autorestart=true
 priority=10