diff --git a/infrastructure.org b/infrastructure.org
index 930c456..a11c969 100644
--- a/infrastructure.org
+++ b/infrastructure.org
@@ -1315,7 +1315,7 @@ services:
 
 AudioMuse-AI performs sonic analysis on music files to auto-generate
 playlists for Jellyfin. Runs as Flask app + RQ worker, connects to
-existing PostgreSQL and Valkey. Routes through Gluetun VPN.
+existing PostgreSQL and Valkey. On the bridge network (not gluetun).
 
 #+BEGIN_SRC yaml :tangle /docker/compose/services/audiomuse.yaml
 services:
@@ -1346,10 +1346,10 @@ services:
       - traefik.enable=true
       - traefik.http.routers.audiomuse.service=audiomuse
       - traefik.http.routers.audiomuse.rule=Host(`audiomuse.${CLOUDFLARE_DNS_ZONE:?err}`)
-      - traefik.http.routers.audiomuse.entrypoints=tunnel
-      - traefik.http.routers.audiomuse.middlewares=authentik-forwardauth@file,security-headers@file,traefik-bouncer@file
+      - traefik.http.routers.audiomuse.entrypoints=tunnel,web,secureweb
+      - traefik.http.routers.audiomuse.middlewares=authentik-forwardauth@file,security-headers@file
       - traefik.http.services.audiomuse.loadbalancer.server.scheme=http
-      - traefik.http.services.audiomuse.loadbalancer.server.port=${WEBUI_PORT_AUDIOMUSE:-8005}
+      - traefik.http.services.audiomuse.loadbalancer.server.port=8000
 
   audiomuse-worker:
     image: ghcr.io/neptunehub/audiomuse-ai:latest