diff --git a/.env b/.env
index b7d5452..78dd28a 100644
--- a/.env
+++ b/.env
@@ -5,9 +5,10 @@ COREDNS_IMAGE=coredns/coredns:1.11.3
 
 # Host ports. systemd-resolved usually binds 53, so default to 5353.
 # Override to 53 if you actually want this to be the host's resolver.
-DNS_PORT=1053
+DNS_PORT=5353
 METRICS_PORT=9153
-HEALTH_PORT=8080
+# 8080 is famously contested (dev servers, alternate HTTP). 8081 less so.
+HEALTH_PORT=8081
 
 # DoT (DNS-over-TLS, RFC 7858) — IANA port 853. Host port 8853 to
 # stay unprivileged.