diff --git a/roborock/docker-compose.yml b/roborock/docker-compose.yml
index 4d244a7..0d84460 100644
--- a/roborock/docker-compose.yml
+++ b/roborock/docker-compose.yml
@@ -3,20 +3,19 @@ services:
     image: ghcr.io/python-roborock/local_roborock_server:latest
     container_name: roborock_server
     restart: unless-stopped
-    # host-Netzwerk ist zwingend empfohlen für mDNS / Staubsauger-Erkennung im LAN
-    network_mode: host
+    # network_mode: host ENTFERNT -> Wechsel auf Standard-Bridge
+    ports:
+      # Format: HOST_PORT:CONTAINER_PORT
+      - "${ROBOROCK_SERVER_HTTPS_PORT:-8888}:${ROBOROCK_SERVER_HTTPS_PORT:-8888}"
+      - "${ROBOROCK_SERVER_MQTT_TLS_PORT:-8883}:${ROBOROCK_SERVER_MQTT_TLS_PORT:-8883}"
     environment:
       - REGION=${ROBOROCK_REGION:-de}
       - TIMEZONE=${ROBOROCK_TIMEZONE:-Europe/Berlin}
-      # Diese Variablen steuern die App-Logik im Container:
       - ROBOROCK_SERVER_LISTENER_MODE=${ROBOROCK_SERVER_LISTENER_MODE:-external_tls}
       - ROBOROCK_SERVER_HTTPS_PORT=${ROBOROCK_SERVER_HTTPS_PORT:-8888}
       - ROBOROCK_SERVER_MQTT_TLS_PORT=${ROBOROCK_SERVER_MQTT_TLS_PORT:-8883}
     volumes:
-      # Nutzt einen Host-Pfad aus der .env (Fallback: ./roborock_data im selben Ordner)
       - ${ROBOROCK_HOST_PATH:-./roborock_data}:/data
-
-    # Der korrigierte Healthcheck mit voller Parametrisierung (wählt flexibel curl oder wget)
     healthcheck:
       test: [
         "CMD", 
@@ -31,3 +30,14 @@ services:
       timeout: ${ROBOROCK_HEALTHCHECK_TIMEOUT:-5s}
       retries: ${ROBOROCK_HEALTHCHECK_RETRIES:-5}
       start_period: ${ROBOROCK_HEALTHCHECK_START_PERIOD:-20s}
+
+  roborock-setup:
+    image: ghcr.io/python-roborock/local_roborock_server:latest
+    container_name: roborock_setup
+    stdin_open: true
+    tty: true
+    entrypoint: ["python", "-m", "roborock.local_server.setup"]
+    volumes:
+      - ${ROBOROCK_HOST_PATH:-./roborock_data}:/data
+    profiles:
+      - setup