The base docker-compose.yml maps nginx to 80:80, which conflicts with the host-level nginx that handles SSL termination on production servers. The production overlay now explicitly maps to 8080:80 so the host proxy can forward to localhost:8080. Updated DEPLOYMENT.md with host reverse proxy setup instructions and corrected architecture diagrams. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>