diff --git a/docker-compose.yml b/docker-compose.yml
index 72c61c7..1d2fd4f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -111,8 +111,7 @@ services:
       S3_SECRET_KEY: ${S3_SECRET_KEY:-}
       S3_REGION: ${S3_REGION:-us-east-1}
       S3_SECURE: ${S3_SECURE:-true}
-    ports:
-      - "8000:8000"
+    # No exposed ports — accessed via reverse proxy
     volumes:
       - storage:/data/storage
     healthcheck: