diff --git a/src/shadowbox/docker/Dockerfile b/src/shadowbox/docker/Dockerfile
index 0ad8cb1e..e116d65b 100644
--- a/src/shadowbox/docker/Dockerfile
+++ b/src/shadowbox/docker/Dockerfile
@@ -16,7 +16,7 @@
 FROM node:8.11.3-alpine
 
 # Versions can be found at https://github.com/Jigsaw-Code/outline-ss-server/releases
-ARG SS_VERSION=1.0.0
+ARG SS_VERSION=1.0.2
 
 # Save metadata on the software versions we are using.
 LABEL shadowbox.node_version=8.11.3
diff --git a/src/shadowbox/server/main.ts b/src/shadowbox/server/main.ts
index a1945254..40c8a642 100644
--- a/src/shadowbox/server/main.ts
+++ b/src/shadowbox/server/main.ts
@@ -176,6 +176,11 @@ async function main() {
 
   const accessKeyRepository = new ServerAccessKeyRepository(
       portProvider, proxyHostname, accessKeyConfig, shadowsocksServer);
+
+  // TODO(fortuna): Once single-port is fully rollout, we should:
+  // - update `install_server.sh` to stop using `--net=host` for new servers (old servers are stuck
+  //   with that forever) and output new instructions for port configuration.
+  // - update manger UI to provide new instructions for port configuration in manual mode.
   if (createRolloutTracker(serverConfig).isRolloutEnabled('single-port', 0)) {
     accessKeyRepository.enableSinglePort();
   }