Docker Compose + nginx-proxy + Let's Encrypt. Hosts: api.${DOMAIN}, app.${DOMAIN}, portal.${DOMAIN}. Multi-stage Dockerfile builds api, web, portal, workflows targets. Deploy: ./deploy.sh (pulls, builds, starts, migrates).