diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 783fb04..61c530c 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -13,8 +13,9 @@ services:
       - postgres_data:/var/lib/postgresql/data
       # Mount all migration files for initialization
       - ./migrations:/docker-entrypoint-initdb.d:ro
-    ports:
-      - "${POSTGRES_PORT:-5432}:5432"
+    # NO external port mapping - only accessible via Docker network
+    # ports:
+    #   - "${POSTGRES_PORT:-5432}:5432"
     restart: always
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER}"]