diff --git a/docker/compose.yml b/docker/compose.yml
index 29c2738..321ec7b 100644
--- a/docker/compose.yml
+++ b/docker/compose.yml
@@ -10,6 +10,11 @@ services:
     hostname: agentchat
     domainname: agentchat.gbrown.org
     networks: ['nginx-bridge']
+    ports:
+      # Loopback only: lets this host's own agent reach the hub at
+      # http://127.0.0.1:8080 without going through NPM - the LAN access
+      # list there blocks the VPS's public IP. Unreachable from elsewhere.
+      - '127.0.0.1:8080:8080'
     environment:
       - TZ=America/New_York
       - AGENTCHAT_DB=/data/agentchat.db