diff --git a/dot-kuvert b/dot-kuvert
index 007292c..b2672bf 100644
--- a/dot-kuvert
+++ b/dot-kuvert
@@ -48,7 +48,13 @@ preamble f
 msp /usr/sbin/sendmail -om -oi -oem
 
 can-detach t
+
+# smtp submission daemon settings
+# do NOT change mahost unless you know what you're doing!
+# making smtp submission port available outside localhost
+# is a serious security risk
 # maport 2587
+# mahost 127.0.0.1
 # ma-user yourname
 # ma-pass somethingSECRET
 
diff --git a/dot-kuvert.docker b/dot-kuvert.docker
index fb4363d..c170522 100644
--- a/dot-kuvert.docker
+++ b/dot-kuvert.docker
@@ -48,7 +48,13 @@ mspass-from-query-secret f
 #msp /usr/sbin/sendmail -om -oi -oem
 
 can-detach f
+
+# smtp submission daemon settings
 maport 2587
+# this is requried for kuvert-smtp running in docker
+# to be available from outside of the container
+# it is a security risk in non-docker set-up!
+mahost 0.0.0.0
 ma-user kuvert
 ma-pass ChangeMe