diff --git a/docs/ports.md b/docs/ports.md
new file mode 100644
index 0000000..ba32954
--- /dev/null
+++ b/docs/ports.md
@@ -0,0 +1,14 @@
+# T1 Port Map (vps.lab)
+
+Ports allocated by the `HangmanLab.Server.T1` deployment (`~/HangmanLab.Server.T1`).
+System-level services (sshd, nginx, systemd-resolved) are excluded.
+
+| Port | Bind | Service | Note |
+|------|------|---------|------|
+| 3000 | 0.0.0.0 | HangmanLab Frontend | Reverse-proxied by nginx (hangman-lab.top) |
+| 3002 | 0.0.0.0 | HarborForge Frontend (hf_frontend) | Reverse-proxied by nginx (hf.hangman-lab.top) |
+| 3306 | 0.0.0.0 | MySQL | Shared by HangmanLab backend and HarborForge backend |
+| 5000 | 0.0.0.0 | HangmanLab Backend | Reverse-proxied by nginx (api.hangman-lab.top) |
+| 5002 | 0.0.0.0 | HarborForge Backend (hf_backend) | Reverse-proxied by nginx (hf-api.hangman-lab.top) |
+| 18080 | 0.0.0.0 | AbstractWizard | Access via SSH tunnel only |
+| — | host network | HarborForge Monitor | network_mode: host; no listening port (bridge disabled) |