diff --git a/deploy/docker/docker-compose.dokploy.yml b/deploy/docker/docker-compose.dokploy.yml
index 35c400c..82648e4 100644
--- a/deploy/docker/docker-compose.dokploy.yml
+++ b/deploy/docker/docker-compose.dokploy.yml
@@ -54,9 +54,9 @@ services:
         condition: service_healthy
       redis:
         condition: service_healthy
-    # Host ports for Nginx Proxy Manager (no Dokploy domain needed)
+    # Host ports (avoid Dokploy UI on :3000)
     ports:
-      - "3000:3000"
+      - "3100:3000"
     healthcheck:
       test: ["CMD", "wget", "-qO-", "http://localhost:3000/health"]
       interval: 30s
@@ -76,7 +76,7 @@ services:
     depends_on:
       - master-api
     ports:
-      - "3001:3000"
+      - "3101:3000"
     networks:
       - media-cluster
 
diff --git a/docs/dokploy.md b/docs/dokploy.md
index 75c0d6c..339b31c 100644
--- a/docs/dokploy.md
+++ b/docs/dokploy.md
@@ -73,12 +73,12 @@ Belangrijk: `DATABASE_URL` wachtwoord moet **exact** gelijk zijn aan `POSTGRES_P
 
 **Zet géén domein in Dokploy** als NPM al HTTPS doet.
 
-Dokploy publiceert:
+Dokploy publiceert (host-poorten gekozen om conflict met Dokploy UI `:3000` te vermijden):
 
-| Service | Host-poort |
-|---------|------------|
-| `master-api` | `3000` |
-| `admin-ui` | `3001` |
+| Service | Host-poort | Container-poort |
+|---------|------------|-----------------|
+| `master-api` | `3100` | `3000` |
+| `admin-ui` | `3101` | `3000` |
 
 In **Nginx Proxy Manager** maak je 2 Proxy Hosts:
 
@@ -88,7 +88,7 @@ In **Nginx Proxy Manager** maak je 2 Proxy Hosts:
 | Domain | `master.jouwdomein.nl` |
 | Scheme | `http` |
 | Forward Hostname/IP | LAN-IP van de **Dokploy-server** |
-| Forward Port | `3000` |
+| Forward Port | `3100` |
 | Websockets Support | **Aan** |
 | SSL | Let's Encrypt + Force SSL |
 
@@ -107,7 +107,7 @@ proxy_read_timeout 86400s;
 | Domain | `admin.jouwdomein.nl` |
 | Scheme | `http` |
 | Forward Hostname/IP | LAN-IP van de **Dokploy-server** |
-| Forward Port | `3001` |
+| Forward Port | `3101` |
 | SSL | Let's Encrypt + Force SSL |
 
 DNS A/AAAA van beide domeinen → publiek IP waar NPM op luistert (poort 443).