diff --git a/docker-compose.yml b/docker-compose.yml
index 5dabe75..55e265a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -19,8 +19,9 @@ services:
       - CACHE_TTL_HOURS=24
     # Required for Playwright browser
     shm_size: '2gb'
-    # Security: run as non-root (optional)
-    # user: "1000:1000"
+    # Use custom network to avoid IP conflicts
+    networks:
+      - purestream_net
     healthcheck:
       test: [ "CMD", "curl", "-f", "http://localhost:8002/health" ]
       interval: 30s
@@ -33,3 +34,11 @@ volumes:
     driver: local
   purestream_session:
     driver: local
+
+networks:
+  purestream_net:
+    driver: bridge
+    ipam:
+      driver: default
+      config:
+        - subnet: 172.28.0.0/16