diff --git a/.env.example b/.env.example
index 515dd86..413f555 100644
--- a/.env.example
+++ b/.env.example
@@ -1,5 +1,5 @@
 # App
-APP_PORT=8080
+APP_PORT=4000
 APP_URL=https://test200.de4ima.uk
 SITE_NAME=Evilfox.cc
 SECURE_COOKIES=true
@@ -21,5 +21,5 @@ MYSQL_DUMP_PATH=/data/wg.sql
 
 # Dokploy Domain tab:
 #   Service = app
-#   Port    = 8080
+#   Port    = 4000
 TZ=UTC
diff --git a/Dockerfile b/Dockerfile
index fc00dbf..e583b1a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,9 +20,9 @@ ENV APP_ROOT=/app \
     TEMPLATES_DIR=/app/web/templates \
     STATIC_DIR=/app/web/static \
     MYSQL_DUMP_PATH=/data/wg.sql \
-    APP_PORT=8080
-EXPOSE 8080
+    APP_PORT=4000
+EXPOSE 4000
 HEALTHCHECK --interval=30s --timeout=5s --start-period=40s --retries=3 \
-  CMD curl -fsS http://127.0.0.1:8080/healthz >/dev/null || exit 1
+  CMD curl -fsS http://127.0.0.1:4000/healthz >/dev/null || exit 1
 USER nobody
 CMD ["/app/wg-panel"]
diff --git a/docker-compose.yml b/docker-compose.yml
index 5985c02..ab05ece 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -25,10 +25,10 @@ services:
         condition: service_healthy
     # Dokploy/Traefik routes to this internal port — do NOT publish host ports.
     expose:
-      - "8080"
+      - "4000"
     environment:
-      APP_PORT: "8080"
-      APP_URL: ${APP_URL:-http://localhost:8080}
+      APP_PORT: "4000"
+      APP_URL: ${APP_URL:-http://localhost:4000}
       SITE_NAME: ${SITE_NAME:-Evilfox.cc}
       DATABASE_URL: postgres://${POSTGRES_USER:-wg}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-wg}?sslmode=disable
       SESSION_SECRET: ${SESSION_SECRET:?set SESSION_SECRET}
diff --git a/internal/config/config.go b/internal/config/config.go
index 8461dd9..9a611cd 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -24,8 +24,8 @@ type Config struct {
 
 func Load() Config {
 	return Config{
-		AppPort:        getenv("APP_PORT", "8080"),
-		AppURL:         strings.TrimRight(getenv("APP_URL", "http://localhost:8080"), "/"),
+		AppPort:        getenv("APP_PORT", "4000"),
+		AppURL:         strings.TrimRight(getenv("APP_URL", "http://localhost:4000"), "/"),
 		SiteName:       getenv("SITE_NAME", "Evilfox.cc"),
 		DatabaseURL:    getenv("DATABASE_URL", "postgres://wg:wg@localhost:5432/wg?sslmode=disable"),
 		SessionSecret:  getenv("SESSION_SECRET", "change-me-session-secret-32chars!!"),