diff --git a/Dockerfile b/Dockerfile
index dd5ec79..0a732b6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -95,7 +95,10 @@ RUN mkdir -p /home/appuser/.social-mcp \
 USER appuser
 
 # Environment defaults
-ENV NODE_ENV=production \
+# Clear proxy env from build stage (must not leak into runtime)
+ENV HTTP_PROXY= \
+    HTTPS_PROXY= \
+    NODE_ENV=production \
     HOST=0.0.0.0 \
     PORT=3000 \
     HEADLESS=true \