diff --git a/config/.env.example b/config/.env.example
index a6ed643..8ac9777 100644
--- a/config/.env.example
+++ b/config/.env.example
@@ -1,7 +1,6 @@
 # Public hostnames of the services PulseNode links to / monitors.
 # These are not secrets, but keeping them here (rather than hardcoded in
 # config.yml) means the same config.yml works across environments.
-TRAEFIK_HOST_TRAEFIK=traefik.example.com
 TRAEFIK_HOST_CODE=code.example.com
 TRAEFIK_HOST_COOLIFY=coolify.example.com
 TRAEFIK_HOST_GITEA=git.example.com
diff --git a/config/config.yml b/config/config.yml
index d46344f..f13db85 100644
--- a/config/config.yml
+++ b/config/config.yml
@@ -21,10 +21,10 @@ groups:
       - type: docker
         name: Traefik
         containerName: traefik
-        href: https://${TRAEFIK_HOST_TRAEFIK}
         interval: 10s
+        # No href: the dashboard is disabled (--api.dashboard=false).
         # Swap for a `traefik` widget (router/entrypoint/middleware view)
-        # once the API is enabled - see Traefik's --api.dashboard docs.
+        # if the API gets enabled - see Traefik's --api.dashboard docs.
 
       - type: docker
         name: Coolify
diff --git a/docker-compose.yml b/docker-compose.yml
index 9d2bd73..a20d534 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -24,7 +24,7 @@ services:
       - ./config:/app/config:ro
     env_file: .env
     networks:
-      - falcon_network
+      - compose_network
     labels:
       - traefik.enable=true
       - traefik.docker.network=${NETWORK_NAME}
@@ -33,11 +33,8 @@ services:
       - traefik.http.routers.pulsenode-web.entrypoints=web
       - traefik.http.routers.pulsenode-web.middlewares=pulsenode-redirect-web-secure
       - traefik.http.routers.pulsenode-web-secure.rule=Host(`${TRAEFIK_HOST}`)
-      - traefik.http.routers.pulsenode-web-secure.entrypoints=websecure
+      - traefik.http.routers.pulsenode-web-secure.entrypoints=web-secure
       - traefik.http.routers.pulsenode-web-secure.tls.certresolver=resolver
-      # Verify these entrypoint/middleware/certresolver names against
-      # traefik/dynamic/*.yaml in the stacks repo before deploying - written
-      # to match that repo's own convention, not independently confirmed.
       - traefik.http.routers.pulsenode-web-secure.middlewares=security-headers@file,no-index@file
       - traefik.http.services.pulsenode-web-secure.loadbalancer.server.port=3000
     healthcheck:
@@ -48,5 +45,6 @@ services:
       retries: 3
 
 networks:
-  falcon_network:
+  compose_network:
+    name: ${NETWORK_NAME}
     external: true