diff --git a/docker-compose.yml b/docker-compose.yml
index 9434ba7..b1ff64a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -40,7 +40,9 @@ services:
   stunnel-wwtp:
     image: stunnel-wwtp:latest
     container_name: stunnel-wwtp
-    restart: always
+    restart: "no"
+    # Intentionally not auto-starting on boot/daemon restart — start manually
+    # with `docker start stunnel-wwtp` (or `docker compose up -d`) when needed.
     network_mode: host
     # network_mode: host is used so stunnel can reach the
     # 10.214.0.x switch subnet via the host's routing table.