diff --git a/docker-compose.yaml b/docker-compose.yaml
index 0689158..dedf364 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -54,8 +54,7 @@ services:
     image: mysql:8.0
     container_name: gis_db
     command: --default-authentication-plugin=mysql_native_password
-    ports:
-      - "${HOST_PORT_DB:-3307}:3306" # Mapped to 3307 on host to avoid conflicts with Laragon/XAMPP
+    # No host port mapping - DB is only accessible internally via gis-network
     environment:
       - MYSQL_ROOT_PASSWORD=rootpassword
       - MYSQL_DATABASE=spbu_db
@@ -69,8 +68,7 @@ services:
   phpmyadmin:
     image: phpmyadmin:latest
     container_name: gis_phpmyadmin
-    ports:
-      - "${HOST_PORT_PHPMYADMIN:-8080}:80"
+    # No host port mapping - Coolify's Traefik proxy routes traffic via the assigned domain
     environment:
       - PMA_HOST=db
       - PMA_USER=root