# Deployment

Docker images are built via `.github/workflows/publish.yml` and pushed to GHCR (`ghcr.io`). Portainer redeploys via `.github/workflows/re-pull.yml`. Supports `dev`, `stg`, and `prod` stacks.

The Dockerfile uses a two-stage build: Bun builder → Bun runner (non-root user, port 3000).