diff --git a/docker-compose.yml b/docker-compose.yml
index 49a1bf4..0158c44 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -11,9 +11,11 @@ services:
     # Mount the data directory to persist the database and browser session
     volumes:
       - ./data:/app/data
-    ports:
-      - "3000:3000"   # Web dashboard
-      - "6080:6080"   # noVNC for human login
+    # Ports are NOT published to the host. Dokploy/Traefik routes traffic
+    # to the container's internal ports via configured domains.
+    expose:
+      - "3000"   # Web dashboard
+      - "6080"   # noVNC for human login
     environment:
       - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
       - REDDIT_USERNAME=${REDDIT_USERNAME}