From 705d88dca1979845067ac22e6648f7e1327d273a Mon Sep 17 00:00:00 2001
From: jjbrunton <jamie@jbrunton.co.uk>
Date: Fri, 22 May 2026 21:32:12 +0100
Subject: [PATCH] Revert "Publish noVNC on host:16080 to bypass WS-stripping
 reverse proxy"

This reverts commit 65a8fcb16329017a2d5de66584304ce5d08cc8b9.
---
 docker-compose.yml | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 514f424..622d0aa 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -15,14 +15,11 @@ services:
     # path on every restart.
     volumes:
       - reddit_bot_data:/app/data
-    # Dashboard goes through Traefik on a domain; noVNC needs the WebSocket
-    # upgrade header, which the upstream openresty proxy strips, so we
-    # publish noVNC directly on a host port and access it via the dokploy
-    # host's IP. Auth is handled by VNC_PASSWORD.
-    ports:
-      - "16080:6080"   # noVNC, reachable as http://<dokploy-host>:16080/
+    # Ports are NOT published to the host. Dokploy/Traefik routes traffic
+    # to the container's internal ports via configured domains.
     expose:
-      - "3000"         # Web dashboard (Traefik-routed)
+      - "3000"   # Web dashboard
+      - "6080"   # noVNC for human login
     environment:
       - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
       - REDDIT_USERNAME=${REDDIT_USERNAME}