After each staging deploy, run `docker image prune -f` to remove dangling images left behind by the previous pull. Without this, every deploy accumulates ~800MB of unreferenced layers, eventually filling the VPS disk (as happened with 146 images consuming 29GB on a 38GB disk). Add json-file log rotation (10MB x 3 files) to all services via a shared x-logging anchor. Docker's default json-file driver has no size limit, so container logs can grow unbounded on long-running instances.