diff --git a/application/services/VectorService.php b/application/services/VectorService.php
index 010a4e3..a3a9004 100644
--- a/application/services/VectorService.php
+++ b/application/services/VectorService.php
@@ -19,7 +19,7 @@ class VectorService
         $url = getenv('QDRANT_URL')
             ?: ($_SERVER['QDRANT_URL'] ?? null)
             ?: ($_ENV['QDRANT_URL'] ?? null)
-            ?: 'http://172.21.0.3:6333'; // IP nis2-qdrant (agg. 2026-05-29: era .5, container con IP dinamico driftato). TODO: assegnare ipv4_address statico in docker-compose per evitare ricorrenze.
+            ?: 'http://nis2-qdrant:6333'; // hostname Qdrant (agg. 2026-05-29): drift-proof. L'IP hardcoded .5 era driftato a .3; con clear_env=no php-fpm eredita QDRANT_URL e risolve l'hostname via Docker DNS (CLI verificato 200). Evita ricorrenze del drift IP.
         $this->qdrantUrl = rtrim($url, '/');
         $this->collection = $collection;
     }
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 7297187..30fef19 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -28,7 +28,7 @@ services:
       - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
       - VOYAGE_API_KEY=${VOYAGE_API_KEY}
       - VOYAGE_MODEL=${VOYAGE_MODEL:-voyage-3-lite}
-      - QDRANT_URL=http://172.21.0.5:6333
+      - QDRANT_URL=http://nis2-qdrant:6333
       - VAULT_STEWARD_URL=https://vault-steward:8443
       - VAULT_APP_TOKEN=${VAULT_APP_TOKEN_NIS2}
       - VAULT_PREFIX=tier1__nis2-app__