diff --git a/CHANGES b/CHANGES
index 0cc2ae934..f38c7703f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2960,4 +2960,5 @@
 * app backup: no more part alters app state. runs completely in background
 * system: disk usage is not collected in background. new disk ui, computes space on demand
 * backups: multiple backup targets
+* port bindings: add `enabledByDefault` property in manifest
 
diff --git a/dashboard/src/components/AppInstallDialog.vue b/dashboard/src/components/AppInstallDialog.vue
index 113784188..08821ac7b 100644
--- a/dashboard/src/components/AppInstallDialog.vue
+++ b/dashboard/src/components/AppInstallDialog.vue
@@ -184,11 +184,11 @@ defineExpose({
     // ensure we have value property
     for (const p in tcpPorts.value) {
       tcpPorts.value[p].value = tcpPorts.value[p].value || tcpPorts.value[p].defaultValue;
-      tcpPorts.value[p].enabled = true;
+      tcpPorts.value[p].enabled = tcpPorts.value[p].enabledByDefault ?? true;
     }
     for (const p in udpPorts.value) {
       udpPorts.value[p].value = udpPorts.value[p].value || udpPorts.value[p].defaultValue;
-      udpPorts.value[p].enabled = true;
+      udpPorts.value[p].enabled = udpPorts.value[p].enabledByDefault ?? true;
     }
 
     secondaryDomains.value = a.manifest.httpPorts;