<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Container Deployment on StackOnward</title><link>https://stackonward.com/tags/container-deployment/</link><description>Recent content in Container Deployment on StackOnward</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Fri, 11 Sep 2026 05:12:00 +0800</lastBuildDate><atom:link href="https://stackonward.com/tags/container-deployment/index.xml" rel="self" type="application/rss+xml"/><item><title>Docker Compose Production: Images, Health Checks, Secrets</title><link>https://stackonward.com/posts/docker-compose-production/</link><pubDate>Fri, 11 Sep 2026 05:12:00 +0800</pubDate><guid>https://stackonward.com/posts/docker-compose-production/</guid><description>&lt;p&gt;Docker Compose production on one host is a pinned image, durable data, a private app port, resource caps, and a stack that returns after a container or host restart. &lt;code&gt;docker compose up -d&lt;/code&gt; only reports that the containers started.&lt;/p&gt;
&lt;figure&gt;
 &lt;img src="https://stackonward.com/images/posts/docker-compose-production/en/compose-topology.svg" alt="Single-host Docker Compose production with a reverse proxy, app container, persistent volume, secret file, and size-capped logs" loading="lazy" decoding="async"&gt;
 &lt;figcaption&gt;The public internet should reach only the reverse proxy on 80/443. Keep the app port on loopback or on the container network.&lt;/figcaption&gt;
&lt;/figure&gt;

&lt;h2 id="when-docker-compose-production-is-the-right-fit"&gt;When Docker Compose production is the right fit&lt;/h2&gt;
&lt;p&gt;Compose can run production when the whole stack lives on one machine, the service graph is small, and a host failure is recovered by a person or a script on another machine:&lt;/p&gt;</description></item></channel></rss>