diff --git a/compose.yml b/compose.yml
index ea5fb20..750ada7 100644
--- a/compose.yml
+++ b/compose.yml
@@ -23,7 +23,7 @@ services:
       CTLSSA_DJANGO_DATABASE: production
       CTLSSA_DB_ENGINE: postgresql_psycopg2
       CTLSSA_DB_HOST: db
-      CTLSSA_CERTSTREAM_SERVER_URL: ws://certstream
+      CTLSSA_CERTSTREAM_SERVER_URL: ws://certstream:4000
     # uwsgi reloads on SIGTERM, so use SIGINT instead
     # https://uwsgi-docs.readthedocs.io/en/latest/Management.html#signals-for-controlling-uwsgi
     stop_signal: SIGINT
@@ -51,7 +51,7 @@ services:
       CTLSSA_DJANGO_DATABASE: production
       CTLSSA_DB_ENGINE: postgresql_psycopg2
       CTLSSA_DB_HOST: db
-      CTLSSA_CERTSTREAM_SERVER_URL: ws://certstream
+      CTLSSA_CERTSTREAM_SERVER_URL: ws://certstream:4000
     entrypoint: ctlssa
     command: ingest
     restart: always
diff --git a/src/ctlssa/app/settings.py b/src/ctlssa/app/settings.py
index ec245b4..7b13d6e 100644
--- a/src/ctlssa/app/settings.py
+++ b/src/ctlssa/app/settings.py
@@ -26,7 +26,7 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = os.environ.get("CTLSSA_ALLOWED_HOSTS", "").split(",")
 
 
 # Application definition