diff --git a/docker-compose.selfhosted.yml b/docker-compose.selfhosted.yml
index bcf2a95f..63ff055c 100644
--- a/docker-compose.selfhosted.yml
+++ b/docker-compose.selfhosted.yml
@@ -300,7 +300,6 @@ services:
     ports:
       - "80:80"
       - "443:443"
-      - "8888:8888"   # Hatchet dashboard (proxied with TLS)
     volumes:
       - ./Caddyfile:/etc/caddy/Caddyfile:ro
       - caddy_data:/data
@@ -340,6 +339,7 @@ services:
       postgres:
         condition: service_healthy
     ports:
+      - "0.0.0.0:8888:8888"   # Hatchet dashboard (plain HTTP — no TLS)
       - "127.0.0.1:7078:7077"
     env_file:
       - ./.env.hatchet
diff --git a/scripts/setup-selfhosted.sh b/scripts/setup-selfhosted.sh
index e0bfc1d4..a32ed55c 100755
--- a/scripts/setup-selfhosted.sh
+++ b/scripts/setup-selfhosted.sh
@@ -1376,6 +1376,8 @@ step_caddyfile() {
     }"
     fi
 
+    local hatchet_proxy_block=""
+
     if [[ -n "$TLS_CERT_PATH" ]] && [[ -n "$CUSTOM_DOMAIN" ]]; then
         # Custom domain with user-provided TLS certificate (from --custom-ca directory)
         cat > "$caddyfile" << CADDYEOF
@@ -1387,7 +1389,7 @@ $CUSTOM_DOMAIN {
     }
     handle /health {
         reverse_proxy server:1250
-    }${lk_proxy_block}
+    }${lk_proxy_block}${hatchet_proxy_block}
     handle {
         reverse_proxy web:3000
     }
@@ -1404,7 +1406,7 @@ $CUSTOM_DOMAIN {
     }
     handle /health {
         reverse_proxy server:1250
-    }${lk_proxy_block}
+    }${lk_proxy_block}${hatchet_proxy_block}
     handle {
         reverse_proxy web:3000
     }
@@ -1425,7 +1427,7 @@ CADDYEOF
     }
     handle /health {
         reverse_proxy server:1250
-    }${lk_proxy_block}
+    }${lk_proxy_block}${hatchet_proxy_block}
     handle {
         reverse_proxy web:3000
     }
@@ -1439,23 +1441,8 @@ CADDYEOF
         ok "Caddyfile already exists"
     fi
 
-    # Add Hatchet dashboard route (Hatchet is always-on for all multitrack pipelines)
     if [[ "$DAILY_DETECTED" == "true" ]] || [[ "$LIVEKIT_DETECTED" == "true" ]]; then
-        if ! grep -q "hatchet" "$caddyfile" 2>/dev/null; then
-            cat >> "$caddyfile" << CADDYEOF
-
-# Hatchet workflow dashboard (multitrack processing)
-:8888 {
-    tls internal {
-        on_demand
-    }
-    reverse_proxy hatchet:8888
-}
-CADDYEOF
-            ok "Added Hatchet dashboard route to Caddyfile (port 8888)"
-        else
-            ok "Hatchet dashboard route already in Caddyfile"
-        fi
+        ok "Hatchet dashboard available at port 8888"
     fi
 }