diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index b3c0ea1..87d0c56 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -33,17 +33,16 @@ jobs:
           docker build -t altricade-portfolio:${{ github.sha }} -t altricade-portfolio:latest .
 
       # Replace the running container with the freshly built image.
-      #   -p 8080:80  publishes the container on host port 8080.
-      #   Point Nginx Proxy Manager's proxy host at:  <server-ip>:8080
-      #   (Or, if NPM runs in Docker, put this container on NPM's network and
-      #    forward to  altricade-portfolio:80  instead — see note below.)
+      # It joins the `proxy` network (the one Nginx Proxy Manager is on), so
+      # NPM can reach it by container name — no published host port needed.
+      # In NPM, forward to:  hostname = altricade-portfolio , port = 80 , http
       - name: Deploy container
         run: |
           docker rm -f altricade-portfolio 2>/dev/null || true
           docker run -d \
             --name altricade-portfolio \
             --restart unless-stopped \
-            -p 8080:80 \
+            --network proxy \
             altricade-portfolio:latest
 
       # Free disk on the shared runner by dropping old, untagged images.