diff --git a/docker-compose.ecosystem.yml b/docker-compose.ecosystem.yml
index d130c1f1..813ad9ad 100644
--- a/docker-compose.ecosystem.yml
+++ b/docker-compose.ecosystem.yml
@@ -270,8 +270,10 @@ services:
     image: caddy:2-alpine
     container_name: caddy
     ports:
-      - '80:80'
-      - '443:443'
+      # Bind to public eth0 IP only (not 0.0.0.0) so tailscaled can claim
+      # 100.87.53.10:443 for `tailscale serve` on the tailnet.
+      - '187.124.159.82:80:80'
+      - '187.124.159.82:443:443'
     volumes:
       - ../Caddyfile:/etc/caddy/Caddyfile:ro
       - caddy-data:/data