diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config
index 2c3bf4a6..71b0eb8f 100644
--- a/etc/ssh/sshd_config
+++ b/etc/ssh/sshd_config
@@ -44,6 +44,10 @@ HostKey /etc/ssh/ssh_host_rsa_key
 # ssh-keygen -t ed25519 -N "" -f /etc/ssh/ssh_host_ed25519_key
 # ssh-keygen -t rsa -N "" -f /etc/ssh/ssh_host_rsa_key
 
+# Listen on the following TCP ports, default 22.
+# /etc/ssh/sshd_config ...: ports must be specified before ListenAddress.
+Port 22
+
 # Listen on all IPv4 & IPv6 addresses.
 ListenAddress 0.0.0.0
 ListenAddress ::
@@ -59,9 +63,6 @@ PasswordAuthentication no
 # user.
 PermitRootLogin No
 
-# Listen on the following TCP ports, default 22.
-Port 22
-
 # Print /etc/motd (or /etc/profile or equivalent) on login. It's already
 # done by PAM, so no need for duplicate MOTDs.
 PrintMotd no