The gateway service now lives in system-admin-toj/containers/stacks/ tatlock-ui.yml (shared docker-dataplane network: speaches by service name, host-run Tatlock by LAN IP). Drop deploy/desklock-gateway.yml. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>