diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
index 4bf341f..55e13b5 100644
--- a/ARCHITECTURE.md
+++ b/ARCHITECTURE.md
@@ -38,7 +38,7 @@ redundancy for access even if Caddy is down.
 4. On success: Caddy copies `X-Authentik-*` headers and proxies to service
 
 ### Tailscale-only services
-- Webtop remote desktop (`tailscale serve :8497`)
+- Webtop remote desktop (`tailscale serve :PORT`)
 - Internal dashboards (portal, status feeds)
 - atlas-01 SSH (blocked on public firewall, tailnet-only)