diff --git a/.env.example b/.env.example
index 0533e54..4650001 100644
--- a/.env.example
+++ b/.env.example
@@ -1,13 +1,13 @@
 # Service URLs for local dev (pointing to your server)
 TEST_HOST=192.168.86.149
-WIKIJS_URL=http://192.168.86.149:8088
-NEO4J_URI=bolt://192.168.86.149:7687
+WIKIJS_URL=http://wiki:3000
+NEO4J_URI=bolt://neo4j:7687
 QDRANT_HOST=192.168.86.149
 QDRANT_PORT=6333
-OLLAMA_URL=http://192.168.86.149:11434
-SEARXNG_URL=http://192.168.86.149:8080
+OLLAMA_URL=http://ollama:11434
+SEARXNG_URL=http://searxng:8080
 REDIS_HOST=192.168.86.149
-PAPERLESS_URL=http://192.168.86.149:8091
+PAPERLESS_URL=http://paperless:8000
 
 OLLAMA_LLM_MODEL=gemma4:e2b
 OLLAMA_EMBEDDING_MODEL=nomic-embed-text
diff --git a/AGENTS.md b/AGENTS.md
index 173623d..345a4ea 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -47,7 +47,7 @@ When changes are ready for deployment:
 5. **CI/CD triggers automatically**:
    - Gitea CI builds Docker image on new tag
    - Watchtower pulls and deploys to production
-   - Verify deployment: `curl http://192.168.86.149:8000/health`
+   - Verify deployment: `curl http://192.168.86.149:8089/health`
 
 ---
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 89d0fc1..5d0ca6a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- `.env.example` service URL defaults now use docker-dataplane container names (`wiki:3000`, `neo4j:7687`, `searxng:8080`, `paperless:8000`, `ollama:11434`) instead of host IP + published port, ahead of the Phase 4 port lockdown; AGENTS.md deploy health-check URL corrected from port 8000 to 8089.
+
 ## [1.8.0] - 2026-07-14
 
 ### Added