diff --git a/docker-compose.yml b/docker-compose.yml
index fa6845b..58627d4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -83,6 +83,9 @@ services:
   new-frontend:
     build: ./new-frontend
 
+  portal-frontend:
+    build: ./portal-frontend
+
   proxy:
     image: nginx:alpine
     volumes:
@@ -91,5 +94,6 @@ services:
       - "8080:80"
     depends_on:
       - new-frontend
+      - portal-frontend
       - new-backend
       - legacy-frontend
diff --git a/proxy/nginx.conf b/proxy/nginx.conf
index ae89312..6439c2a 100644
--- a/proxy/nginx.conf
+++ b/proxy/nginx.conf
@@ -26,6 +26,21 @@ http {
       proxy_set_header Host $host;
     }
 
+    # Session 2's Angular portal, kept alongside the Session 1 placeholder
+    # at "/" for side-by-side comparison. The trailing slash on both the
+    # location and proxy_pass strips the /portal prefix (same shape as the
+    # "/" -> new-frontend block below); the bare-path redirect below only
+    # exists to catch "/portal" (no trailing slash), which wouldn't match
+    # "location /portal/" and would otherwise silently fall through to "/".
+    location = /portal {
+      return 301 /portal/;
+    }
+
+    location /portal/ {
+      proxy_pass http://portal-frontend:80/;
+      proxy_set_header Host $host;
+    }
+
     location / {
       proxy_pass http://new-frontend:80/;
       proxy_set_header Host $host;