diff --git a/DoliMiddlewareApi/Program.cs b/DoliMiddlewareApi/Program.cs
index 2e106f4..e993c7f 100644
--- a/DoliMiddlewareApi/Program.cs
+++ b/DoliMiddlewareApi/Program.cs
@@ -275,14 +275,14 @@ app.UseSwaggerUI(options =>
     options.SwaggerEndpoint("/swagger/v1/swagger.json", "DoliMiddlewareApi v1");
 });
 
-// No HTTPS redirect in Docker (behind reverse proxy)
-if (!bool.TryParse(builder.Configuration["Dolibarr:ForceHttps"], out var forceHttps) || !forceHttps)
+// HTTPS redirect solo si ForceHttps=true (nunca en Docker)
+if (bool.TryParse(builder.Configuration["Dolibarr:ForceHttps"], out var forceHttps) && forceHttps)
     app.UseHttpsRedirection();
 
-app.UseRateLimiter();
-
 app.UseCors("AllowVueApp");
 
+app.UseRateLimiter();
+
 app.UseAuthentication();
 app.UseAuthorization();
 
diff --git a/compose.yaml b/compose.yaml
index 5e53e29..5acb1c8 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -58,7 +58,7 @@
       dolibarr:
         condition: service_healthy
     ports:
-      - "5000:8080"
+      - "5001:8080"
     environment:
       - ASPNETCORE_ENVIRONMENT=Production
       - Jwt__Secret=DevDemoSecretKeyForDockerCompose2026Min32Chars!!