diff --git a/docs/ports.md b/docs/ports.md
new file mode 100644
index 0000000..d76896c
--- /dev/null
+++ b/docs/ports.md
@@ -0,0 +1,11 @@
+# T0 Port Map (vps.git)
+
+Ports allocated by the `HangmanLab.Server.T0` deployment (`~/git-kc`).
+System-level services (sshd, nginx, systemd-resolved) are excluded.
+
+| Port | Bind | Service | Note |
+|------|------|---------|------|
+| 3000 | 127.0.0.1 | Gitea (git-kc-gitea) | HTTP, reverse-proxied by nginx |
+| 3306 | internal | MySQL (git-kc-mysql) | Not exposed to host; docker-internal only |
+| 8080 | 127.0.0.1 | Keycloak (git-kc-keycloak) | HTTP, reverse-proxied by nginx |
+| — | host network | HarborForge Monitor | network_mode: host; no listening port (bridge disabled) |