- remove Next.js rewrites to http://127.0.0.1:8000 - require NEXT_PUBLIC_BACKEND_URL in API routes (config, financials, config/test) - prevent accidental fallback to host ports; use container service name backend:8000