orchestrator: expose port 900 on port 900