- Change config template in deploy.sh from port 8080 to port 80 - A reverse proxy must listen on port 80 for public HTTP traffic - CAP_NET_BIND_SERVICE allows non-root binding to low ports
- Add deploy.sh: idempotent production deploy (scaffold, build, systemd, health check) - Fix update.sh: align all paths from /opt/nextwks/ to /opt/nextworkspace/ (blueprint-compliant) - deploy.sh safe for first-time setup and subsequent updates - Creates full blueprint directory tree: config/, data/, logs/, src/core/