diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index a8aa732..1a0e5f4 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -1,8 +1,6 @@
 # Replace 'your-registry.example.com' with your real domain
 # Caddy will automatically obtain TLS certificates for this domain via Let's Encrypt
 # and reverse-proxy traffic to the grain service on port 8888 (same Docker network)
-# Note: Caddy passes the Authorization header through by default - do NOT use header_up
-# directives as they can cause literal placeholder strings to be passed instead of values
 
 your-registry.example.com {
     # Allow large uploads for container images
diff --git a/docker-compose.yml b/docker-compose.yml
index a243f7d..5f8881b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,7 +3,7 @@ services:
     image: ghcr.io/pierrelefevre/grain:latest
     container_name: grain-registry
     ports:
-      - "8888:8888"
+      - "127.0.0.1:8888:8888"
     restart: unless-stopped
     environment:
       - RUST_LOG=info