diff --git a/Caddyfile b/Caddyfile
index 0291192..8412de8 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,4 +1,4 @@
-:80 {
+escavador.seconectai.com.br {
     encode gzip zstd
 
     handle {
diff --git a/DEPLOY.md b/DEPLOY.md
index 350f63d..ed70ce8 100644
--- a/DEPLOY.md
+++ b/DEPLOY.md
@@ -24,12 +24,12 @@ sudo ./scripts/install-commands.sh
 seconectaiescavador.install
 ```
 
-O comando clona ou atualiza o codigo em `/opt/Prospeccao_SeConectai`, gera o `.env`, constroi as imagens Docker e sobe os containers pelo Caddy na porta `8080`.
+O comando clona ou atualiza o codigo em `/opt/Prospeccao_SeConectai`, gera o `.env`, constroi as imagens Docker e sobe os containers com HTTPS pelo Caddy.
 
 URL final:
 
 ```text
-http://escavador.seconectai.com.br:8080
+https://escavador.seconectai.com.br
 ```
 
 ## Atualizar
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 5a28377..9c862e2 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -3,7 +3,8 @@ services:
     image: caddy:2-alpine
     restart: unless-stopped
     ports:
-      - "${WEB_PORT:-8080}:80"
+      - "80:80"
+      - "443:443"
     volumes:
       - ./Caddyfile:/etc/caddy/Caddyfile:ro
       - caddy_data:/data
diff --git a/scripts/install-prod.sh b/scripts/install-prod.sh
index 38449dc..b41050e 100755
--- a/scripts/install-prod.sh
+++ b/scripts/install-prod.sh
@@ -2,7 +2,6 @@
 set -euo pipefail
 
 DOMAIN="${DOMAIN:-escavador.seconectai.com.br}"
-WEB_PORT="${WEB_PORT:-8080}"
 COMPOSE_FILE="${COMPOSE_FILE:-docker-compose.prod.yml}"
 ENV_FILE="${ENV_FILE:-.env}"
 
@@ -30,12 +29,11 @@ DB_PORT=5433
 BACKEND_PORT=8082
 FRONTEND_PORT=8081
 SERVER_PORT=8082
-WEB_PORT=$WEB_PORT
 
 JWT_SECRET=$JWT_SECRET
 JWT_EXPIRATION_MINUTES=480
 API_URL=/api
-APP_PUBLIC_URL=http://$DOMAIN:$WEB_PORT
+APP_PUBLIC_URL=https://$DOMAIN
 
 BUSCA_WORKER_ENABLED=true
 BUSCA_WORKER_FIXED_DELAY_MS=15000
@@ -55,7 +53,7 @@ docker compose -f "$COMPOSE_FILE" up -d --build
 
 echo
 echo "Instalacao concluida."
-echo "URL: http://$DOMAIN:$WEB_PORT"
+echo "URL: https://$DOMAIN"
 echo "Frontend interno: http://localhost:8081"
 echo "Backend interno: http://localhost:8082"
 echo