diff --git a/backend/docker-compose.yml b/backend/docker-compose.yml
index d3a8405..f2a29d1 100644
--- a/backend/docker-compose.yml
+++ b/backend/docker-compose.yml
@@ -353,14 +353,16 @@ services:
       - DB_USERNAME=genex
       - DB_PASSWORD=${DB_PASSWORD}
       - DB_NAME=genex
-      - MINIO_ENDPOINT=192.168.1.200  # MinIO on gateway server — internal IP (hairpin NAT: public IP unreachable from LAN)
-      - MINIO_PORT=9100
-      - MINIO_USE_SSL=false
+      - MINIO_ENDPOINT=oss.gogenex.com  # Use domain; extra_hosts maps it to 192.168.1.200 (gateway LAN IP) inside container
+      - MINIO_PORT=443
+      - MINIO_USE_SSL=true
       - MINIO_ACCESS_KEY=genex-admin
       - MINIO_SECRET_KEY=genex-minio-secret
       - MINIO_BUCKET=app-releases
       - OSS_BASE_URL=https://oss.gogenex.com  # Public download base URL for app packages
       - JWT_ACCESS_SECRET=dev-access-secret-change-in-production
+    extra_hosts:
+      - "oss.gogenex.com:192.168.1.200"  # Bypass public DNS; route MinIO via gateway LAN IP (port 443 Nginx → localhost:9100)
     depends_on:
       postgres:
         condition: service_healthy