Revert "Publish noVNC on host:16080 to bypass WS-stripping reverse proxy"

This reverts commit 65a8fcb163.

docker-compose.yml

@@ -15,14 +15,11 @@ services:
     # path on every restart.
     volumes:
       - reddit_bot_data:/app/data
-    # Dashboard goes through Traefik on a domain; noVNC needs the WebSocket
+    # Ports are NOT published to the host. Dokploy/Traefik routes traffic
-    # upgrade header, which the upstream openresty proxy strips, so we
+    # to the container's internal ports via configured domains.
-    # publish noVNC directly on a host port and access it via the dokploy
-    # host's IP. Auth is handled by VNC_PASSWORD.
-    ports:
-      - "16080:6080"   # noVNC, reachable as http://<dokploy-host>:16080/
     expose:
-      - "3000"         # Web dashboard (Traefik-routed)
+      - "3000"   # Web dashboard
+      - "6080"   # noVNC for human login
     environment:
       - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
       - REDDIT_USERNAME=${REDDIT_USERNAME}