diff --git a/docker-compose.yml b/docker-compose.yml
index f7da4a2..0b48e41 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -26,12 +26,23 @@ services:
     depends_on:
       db:
         condition: service_healthy
-    # Bind to localhost only — your reverse proxy (nginx/Caddy) terminates TLS and
-    # forwards to this. Drop the 127.0.0.1 prefix only if exposing directly.
+    # Bind to localhost only — kept for local debugging on the host. The reverse proxy
+    # (Nginx Proxy Manager) reaches this over the shared `proxy` network by container name,
+    # so no public host port is needed.
     ports:
       - '127.0.0.1:3000:3000'
+    networks:
+      - default
+      - proxy
     restart: unless-stopped
 
 volumes:
   db-data:
   uploads:
+
+networks:
+  # NPM lives on this network (its compose project's default network). Joining it lets
+  # NPM proxy to `scoreboardtools-server-1:3000` directly. External = managed elsewhere.
+  proxy:
+    external: true
+    name: plex_default