diff --git a/cmd/spicedb/serve.go b/cmd/spicedb/serve.go
index 5fb5258c14..572451b42b 100644
--- a/cmd/spicedb/serve.go
+++ b/cmd/spicedb/serve.go
@@ -103,7 +103,7 @@ func registerServeCmd(rootCmd *cobra.Command) {
 	serveCmd.Flags().String("internal-grpc-addr", ":50053", "address to listen for internal requests")
 
 	// Flags for HTTP gateway
-	serveCmd.Flags().String("http-addr", ":443", "address to listen for HTTP API requests")
+	serveCmd.Flags().String("http-addr", ":8443", "address to listen for HTTP API requests")
 	serveCmd.Flags().Bool("http-no-tls", false, "serve HTTP API requests unencrypted")
 	serveCmd.Flags().String("http-cert-path", "", "local path to the TLS certificate used to serve HTTP API requests")
 	serveCmd.Flags().String("http-key-path", "", "local path to the TLS key used to serve HTTP API requests")
diff --git a/e2e/spice/spicedb.go b/e2e/spice/spicedb.go
index e224a5a7e3..5207ff1cae 100644
--- a/e2e/spice/spicedb.go
+++ b/e2e/spice/spicedb.go
@@ -48,7 +48,7 @@ func WithTestDefaults(opts ...SpiceDbOption) SpiceDbOption {
 			s.InternalPort = 50052
 		}
 		if s.HttpPort == 0 {
-			s.HttpPort = 443
+			s.HttpPort = 8443
 		}
 		if s.MetricsPort == 0 {
 			s.MetricsPort = 9090