diff --git a/deploy/Caddyfile.snippet b/deploy/Caddyfile.snippet
index 6ac9afb..bbbc60c 100644
--- a/deploy/Caddyfile.snippet
+++ b/deploy/Caddyfile.snippet
@@ -2,7 +2,9 @@
 # DNS A/AAAA record for invoice-app.linumiq.com must point to this server first,
 # otherwise Caddy will fail to obtain a Let's Encrypt certificate.
 
+# Caddy runs in Docker on the `caddy_net` network and reaches the app by
+# container name (the app does not publish a host port).
 invoice-app.linumiq.com {
 	encode zstd gzip
-	reverse_proxy 127.0.0.1:3000
+	reverse_proxy linumiq-invoice:3000
 }