open up a port for healthchecks only