diff --git a/src/commands/docker/up-subcommand.ts b/src/commands/docker/up-subcommand.ts
index 0ee8bc60..fcbb4242 100644
--- a/src/commands/docker/up-subcommand.ts
+++ b/src/commands/docker/up-subcommand.ts
@@ -37,6 +37,13 @@ export async function handleUp(args: string[]): Promise<void> {
     console.log(ok(`Docker stack is running${parsed.host ? ` on ${parsed.host}` : ' locally'}.`));
     console.log(info(`Dashboard port: ${port}`));
     console.log(info(`CLIProxy port: ${proxyPort}`));
+    if (parsed.host) {
+      console.log(
+        info(
+          'Remote access requires dashboard auth. Run inside the container:\n  docker exec -it ccs-cliproxy ccs config auth setup'
+        )
+      );
+    }
   } catch (error) {
     console.error(
       box(fail(error instanceof Error ? error.message : String(error)), {