resolve conflict

docker-compose.yml

@@ -2,8 +2,8 @@ services:
   backend:
     build: ./server
     container_name: dashboard-backend
-    ports:
-      - "3001:3001"
+    expose:
+      - "3001"        # Remove public port, keep internal only
     environment:
       # Root path on the Docker host to mount inside the container.
       # Linux VM:              HOST_BROWSE_ROOT=/home/wnc
@@ -23,8 +23,21 @@ services:
   frontend:
     build: ./dashboard
     container_name: dashboard-frontend
-    ports:
-      - "5173:80"
+    expose:
+      - "5173"        # Remove public port, keep internal only
     depends_on:
       - backend
-    restart: unless-stopped
+    restart: unless-stopped
+
+  nginx:
+    image: nginx:alpine
+    container_name: dashboard-nginx
+    ports:
+      - "80:80"       # Single public entry point
+    volumes:
+      - ./nginx.conf:/etc/nginx/nginx.conf:ro
+    depends_on:
+      - backend
+      - frontend
+    restart: unless-stopped
+