diff --git a/cli/src/castle_cli/manifest.py b/cli/src/castle_cli/manifest.py
index 194422b..ae3c3cb 100644
--- a/cli/src/castle_cli/manifest.py
+++ b/cli/src/castle_cli/manifest.py
@@ -10,7 +10,6 @@ from castle_core.manifest import (  # noqa: F401 — explicit re-exports for typ
     ExposeSpec,
     HttpExposeSpec,
     HttpInternal,
-    HttpPublic,
     JobSpec,
     ManageSpec,
     ProgramSpec,
@@ -26,5 +25,4 @@ from castle_core.manifest import (  # noqa: F401 — explicit re-exports for typ
     RunSpec,
     ServiceSpec,
     SystemdSpec,
-    TLSMode,
 )
diff --git a/core/src/castle_core/manifest.py b/core/src/castle_core/manifest.py
index 7e08098..71c39f0 100644
--- a/core/src/castle_core/manifest.py
+++ b/core/src/castle_core/manifest.py
@@ -16,12 +16,6 @@ class RestartPolicy(str, Enum):
     ALWAYS = "always"
 
 
-class TLSMode(str, Enum):
-    OFF = "off"
-    INTERNAL = "internal"
-    LETSENCRYPT = "letsencrypt"
-
-
 # ---------------------
 # Run specs (discriminated union)
 # ---------------------
@@ -129,15 +123,8 @@ class HttpInternal(BaseModel):
     unix_socket: str | None = None
 
 
-class HttpPublic(BaseModel):
-    hostnames: list[str] = Field(min_length=1)
-    path_prefix: str = "/"
-    tls: TLSMode = TLSMode.INTERNAL
-
-
 class HttpExposeSpec(BaseModel):
     internal: HttpInternal
-    public: HttpPublic | None = None
     health_path: str | None = None