diff --git a/docker-compose.yml b/docker-compose.yml
index 156dd03..05899a6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -16,6 +16,21 @@ services:
     volumes:
       - data:/data
     restart: unless-stopped
+    networks:
+      top_tickets_net:
+        ipv4_address: 10.201.0.10
 
 volumes:
   data:
+
+# Explicit subnet — Docker's auto-assigned default bridge range (often
+# 172.17-172.31.0.0/16) can land on the same block as a real LAN/VLAN,
+# breaking routing to it from this host. Picking a private range nothing
+# else here uses avoids that; see zportal (10.199.0.0/24) and kkpab
+# (10.200.0.0/24) for the same pattern.
+networks:
+  top_tickets_net:
+    driver: bridge
+    ipam:
+      config:
+        - subnet: 10.201.0.0/24