diff --git a/.env.example b/.env.example
index b88f587..613cc61 100644
--- a/.env.example
+++ b/.env.example
@@ -14,7 +14,7 @@ INSTANCE_NAME=My Stoat Instance
 
 # Admin API listen port and admin web origin for CORS.
 ADMIN_API_PORT=5181
-ADMIN_WEB_ORIGIN=http://localhost:5180
+ADMIN_WEB_ORIGIN=https://localhost:5180
 
 # Compose-level convenience variables.
 ADMIN_BIND_IP=127.0.0.1
diff --git a/api/Dockerfile b/api/Dockerfile
index 901d4e5..36b8026 100644
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-slim AS build
+FROM node:24-slim AS build
 WORKDIR /app
 COPY package.json ./
 RUN corepack enable && pnpm install --frozen-lockfile=false
@@ -6,7 +6,7 @@ COPY tsconfig.json ./
 COPY src/ ./src/
 RUN pnpm build
 
-FROM node:22-slim
+FROM node:24-slim
 WORKDIR /app
 COPY package.json ./
 RUN corepack enable && pnpm install --prod --frozen-lockfile=false
diff --git a/compose.yml b/compose.yml
index fa017dc..e9cf824 100644
--- a/compose.yml
+++ b/compose.yml
@@ -11,10 +11,9 @@ services:
     restart: unless-stopped
     ports:
       - "${ADMIN_BIND_IP:-127.0.0.1}:${ADMIN_API_PORT:-5181}:5181"
-    env_file:
-      - .env
     volumes:
       - ./data:/data
+      - ./.env:/app/.env:ro
     networks:
       - stoat
 
diff --git a/web/.dockerignore b/web/.dockerignore
index 0f756ec..a7d0b4f 100644
--- a/web/.dockerignore
+++ b/web/.dockerignore
@@ -1,4 +1,6 @@
 node_modules/
 dist/
+.turbo/
 .env*
+.env
 
diff --git a/web/Dockerfile b/web/Dockerfile
index 4e6ea9e..d465d3f 100644
--- a/web/Dockerfile
+++ b/web/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-slim AS build-app
+FROM node:24-slim AS build-app
 WORKDIR /app
 COPY package.json ./
 RUN corepack enable && pnpm install --frozen-lockfile=false