diff --git a/docker-compose.yml b/docker-compose.yml
index 4d83854..bb12741 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -14,10 +14,13 @@ name: osint-dashboard
 
 services:
   db:
-    build:
-      context: .
-      dockerfile: Dockerfile.pg
-      platforms: ["linux/arm64"]
+    # NO build: block here on purpose. The DB image (TimescaleDB+PostGIS) is
+    # built once via Dockerfile.pg and pinned as localhost/osint-dashboard-pg.
+    # Dockerfile.pg installs TimescaleDB from packagecloud.io, which some
+    # networks (and ISP abuse-mitigation blackholes) block, so rebuilding it
+    # on every CI deploy made the pipeline flaky. Rebuild manually when the
+    # base image or extensions need bumping:
+    #   docker compose build db && docker compose up -d db
     image: localhost/osint-dashboard-pg:latest
     container_name: osint-db
     restart: unless-stopped