diff --git a/.env.example b/.env.example
index 52c5f51..d54b873 100644
--- a/.env.example
+++ b/.env.example
@@ -1,29 +1,54 @@
 # ===========================================
-# Synapsis Environment Configuration
+# Synapsis Docker Environment Configuration
 # ===========================================
-# Copy this file to .env and fill in your values
+# Copy this file to .env and configure your values
 
-# Database (Required)
-DATABASE_URL=postgresql://user:password@localhost/synapsis
+# ===========================================
+# Required Settings
+# ===========================================
 
-# Authentication (Required)
+# Domain Configuration
+# Replace with your actual domain
+DOMAIN=your-domain.com
+
+# Database Credentials
+# Change these to secure values!
+DB_USER=synapsis
+DB_PASSWORD=your-secure-password-here
+DB_NAME=synapsis
+
+# Authentication Secret
 # Generate with: openssl rand -hex 32
-AUTH_SECRET=your-secret-key-here
+AUTH_SECRET=your-secret-key-here-minimum-32-characters
 
-# Node Configuration (Required)
-NEXT_PUBLIC_NODE_DOMAIN=your-domain.com
+# Admin Users
+# Comma-separated list of email addresses with admin access
+ADMIN_EMAILS=admin@your-domain.com
 
-# Admin Users (Required)
-# Comma-separated list of email addresses that have admin access
-ADMIN_EMAILS=admin@example.com
+# ===========================================
+# S3-Compatible Storage (Required for uploads)
+# ===========================================
+# You can use AWS S3, MinIO, Wasabi, Backblaze B2, etc.
 
-# S3-Compatible Storage (Required for media uploads)
 STORAGE_ENDPOINT=https://s3.your-provider.com
 STORAGE_REGION=us-east-1
-STORAGE_BUCKET=synapsis
+STORAGE_BUCKET=synapsis-uploads
 STORAGE_ACCESS_KEY=your-access-key
 STORAGE_SECRET_KEY=your-secret-key
 STORAGE_PUBLIC_BASE_URL=https://cdn.your-domain.com
 
+# ===========================================
 # Optional Settings
+# ===========================================
+
+# Maximum bots per user (default: 5)
 # BOT_MAX_PER_USER=5
+
+# Redis configuration (if using external Redis)
+# REDIS_URL=redis://redis:6379
+
+# ===========================================
+# Docker Compose Settings
+# ===========================================
+
+# COMPOSE_PROJECT_NAME=synapsis
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
new file mode 100644
index 0000000..d2cd540
--- /dev/null
+++ b/.github/workflows/docker.yml
@@ -0,0 +1,79 @@
+name: Build and Push Docker Image to GHCR
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - 'v*'
+  pull_request:
+    branches:
+      - main
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=sha,prefix=,suffix=,format=short
+            # Always tag main branch as latest
+            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: ./docker/Dockerfile
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64,linux/arm64
+
+      - name: Generate SBOM
+        uses: anchore/sbom-action@v0
+        with:
+          image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
+          format: spdx-json
+          output-file: sbom.spdx.json
+        if: github.ref == 'refs/heads/main'
+
+      - name: Upload SBOM as artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: sbom
+          path: sbom.spdx.json
+        if: github.ref == 'refs/heads/main'
diff --git a/README.md b/README.md
index b5a6480..00cf6d4 100644
--- a/README.md
+++ b/README.md
@@ -109,9 +109,39 @@ Synapsis operates on the **Swarm** — a native peer-to-peer network designed sp
 
 ---
 
-## Run Your Own Node
+## 🚀 Run Your Own Node
 
-For complete setup instructions, visit the official documentation:
+### Quick Start (Docker - Recommended)
+
+Deploy your own Synapsis node in minutes using Docker:
+
+```bash
+# 1. Create directory and download files
+mkdir -p /opt/synapsis && cd /opt/synapsis
+curl -O https://raw.githubusercontent.com/cyph3rasi/synapsis/main/docker-compose.yml
+curl -O https://raw.githubusercontent.com/cyph3rasi/synapsis/main/docker/Caddyfile
+curl -O https://raw.githubusercontent.com/cyph3rasi/synapsis/main/.env.example
+
+# 2. Configure environment
+cp .env.example .env
+# Edit .env with your domain, database password, auth secret, etc.
+
+# 3. Start your node
+docker compose up -d
+```
+
+Your node will be available at `https://your-domain.com` with automatic SSL.
+
+**Updating:**
+```bash
+docker compose pull && docker compose up -d
+```
+
+For detailed instructions, see [docker/README.md](docker/README.md).
+
+### Documentation
+
+For complete setup instructions, visit:
 
 **📚 [docs.synapsis.social/run-your-own-node](https://docs.synapsis.social/run-your-own-node)**
 
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..365b0ae
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,139 @@
+# Synapsis - Docker Compose (Production)
+# Uses pre-built image from GitHub Container Registry
+#
+# Quick Start:
+# 1. Download this file, Caddyfile, and .env.example
+# 2. Copy .env.example to .env and fill in your values
+# 3. Run: docker compose up -d
+#
+# Services:
+# - Synapsis Next.js application (from GHCR)
+# - PostgreSQL database (persistent storage)
+# - Caddy reverse proxy with automatic SSL
+
+version: "3.8"
+
+services:
+  # ============================================
+  # PostgreSQL Database
+  # ============================================
+  postgres:
+    image: postgres:16-alpine
+    container_name: synapsis-db
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${DB_USER:-synapsis}
+      POSTGRES_PASSWORD: ${DB_PASSWORD:-changeme}
+      POSTGRES_DB: ${DB_NAME:-synapsis}
+      PGDATA: /var/lib/postgresql/data/pgdata
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    networks:
+      - synapsis-network
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-synapsis} -d ${DB_NAME:-synapsis}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    deploy:
+      resources:
+        limits:
+          memory: 1G
+        reservations:
+          memory: 256M
+
+  # ============================================
+  # Synapsis Application (from GHCR)
+  # ============================================
+  app:
+    image: ghcr.io/cyph3rasi/synapsis:latest
+    container_name: synapsis-app
+    restart: unless-stopped
+    environment:
+      # Database connection
+      DATABASE_URL: postgresql://${DB_USER:-synapsis}:${DB_PASSWORD:-changeme}@postgres:5432/${DB_NAME:-synapsis}
+      
+      # Authentication
+      AUTH_SECRET: ${AUTH_SECRET}
+      
+      # Domain configuration
+      NEXT_PUBLIC_NODE_DOMAIN: ${DOMAIN:-localhost}
+      
+      # Admin emails
+      ADMIN_EMAILS: ${ADMIN_EMAILS}
+      
+      # S3 Storage configuration
+      STORAGE_ENDPOINT: ${STORAGE_ENDPOINT}
+      STORAGE_REGION: ${STORAGE_REGION:-us-east-1}
+      STORAGE_BUCKET: ${STORAGE_BUCKET}
+      STORAGE_ACCESS_KEY: ${STORAGE_ACCESS_KEY}
+      STORAGE_SECRET_KEY: ${STORAGE_SECRET_KEY}
+      STORAGE_PUBLIC_BASE_URL: ${STORAGE_PUBLIC_BASE_URL}
+      
+      # Optional settings
+      BOT_MAX_PER_USER: ${BOT_MAX_PER_USER:-5}
+      
+      # Node environment
+      NODE_ENV: production
+    volumes:
+      # Uploads directory (if using local file storage)
+      - uploads_data:/app/uploads
+    networks:
+      - synapsis-network
+    depends_on:
+      postgres:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "wget", "-q", "--spider", "http://localhost:3000/api/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    deploy:
+      resources:
+        limits:
+          memory: 1G
+        reservations:
+          memory: 256M
+
+  # ============================================
+  # Caddy Reverse Proxy (Automatic SSL)
+  # ============================================
+  caddy:
+    image: caddy:2-alpine
+    container_name: synapsis-caddy
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy_data:/data
+      - caddy_config:/config
+    networks:
+      - synapsis-network
+    depends_on:
+      app:
+        condition: service_healthy
+    environment:
+      - DOMAIN=${DOMAIN:-localhost}
+
+# ============================================
+# Persistent Volumes
+# ============================================
+volumes:
+  postgres_data:
+    driver: local
+  uploads_data:
+    driver: local
+  caddy_data:
+    driver: local
+  caddy_config:
+    driver: local
+
+# ============================================
+# Networks
+# ============================================
+networks:
+  synapsis-network:
+    driver: bridge
diff --git a/docker/README.md b/docker/README.md
index 51255e9..1de913e 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -1,24 +1,31 @@
 # Synapsis Docker Production Deployment
 
-One-command Docker deployment for Synapsis that solves the "user modifies file and breaks git sync" problem.
+One-command Docker deployment for Synapsis using pre-built images from GitHub Container Registry.
 
 ## 🚀 Quick Start
 
 ```bash
-cd /var/www/Synapsis/docker
+# 1. Create a directory for your Synapsis instance
+mkdir -p /opt/synapsis
+cd /opt/synapsis
 
-# 1. Copy and edit environment variables
+# 2. Download the required files
+curl -O https://raw.githubusercontent.com/cyph3rasi/synapsis/main/docker-compose.yml
+curl -O https://raw.githubusercontent.com/cyph3rasi/synapsis/main/docker/Caddyfile
+curl -O https://raw.githubusercontent.com/cyph3rasi/synapsis/main/docker/.env.example
+
+# 3. Set up environment variables
 cp .env.example .env
 nano .env  # Edit all required values
 
-# 2. Start the stack
-docker-compose up -d
+# 4. Start the stack
+docker compose up -d
 
-# 3. Check logs
-docker-compose logs -f
+# 5. Check logs
+docker compose logs -f
 ```
 
-Your Synapsis instance will be available at `http://localhost` (or your configured domain).
+Your Synapsis instance will be available at `https://your-domain.com` (Caddy automatically handles SSL).
 
 ---
 
@@ -44,7 +51,7 @@ newgrp docker
 
 # Verify
 docker --version
-docker-compose --version
+docker compose version
 ```
 
 ---
@@ -56,8 +63,8 @@ docker-compose --version
 Copy `.env.example` to `.env` and configure:
 
 ```bash
-cd /var/www/Synapsis/docker
 cp .env.example .env
+nano .env
 ```
 
 **Required settings:**
@@ -67,66 +74,36 @@ cp .env.example .env
 - `ADMIN_EMAILS` - Admin user email(s)
 - `STORAGE_*` - S3-compatible storage credentials
 
-### 2. SSL/HTTPS Setup
+### 2. DNS Setup
 
-#### Option A: Let's Encrypt (Recommended)
-
-1. Start with HTTP first:
-```bash
-docker-compose up -d
+Point your domain's A record to your server's IP address:
+```
+A  synapsis.example.com  →  YOUR_SERVER_IP
 ```
 
-2. Obtain SSL certificates:
-```bash
-docker run -it --rm \
-  -v ./certbot_data:/etc/letsencrypt \
-  -v ./certbot_www:/var/www/certbot \
-  -p 80:80 \
-  certbot/certbot certonly \
-  --standalone \
-  -d your-domain.com
-```
-
-3. Enable SSL configuration:
-```bash
-cd nginx/conf.d
-mv default.conf default.conf.http
-mv default.conf.ssl default.conf
-# Edit default.conf and replace ${DOMAIN} with your actual domain
-docker-compose restart nginx
-```
-
-4. Uncomment the certbot service in docker-compose.yml for auto-renewal.
-
-#### Option B: Custom SSL Certificates
-
-Place your certificates in `./certbot_data/live/your-domain.com/`:
-- `fullchain.pem`
-- `privkey.pem`
+Caddy will automatically obtain and renew SSL certificates via Let's Encrypt.
 
 ---
 
 ## 🔄 Updates
 
-### Standard Update Process
+Updating is now simple - just pull the latest image:
 
 ```bash
-cd /var/www/Synapsis/docker
+cd /opt/synapsis
 
-# 1. Pull latest changes
-git pull origin main
+# Pull the latest image
+docker compose pull
 
-# 2. Rebuild and restart
-docker-compose down
-docker-compose pull  # If using pre-built images
-docker-compose up -d --build
+# Restart with new image
+docker compose up -d
 
-# 3. Run migrations (if needed)
-docker-compose exec app npx drizzle-kit push
+# Run migrations if needed
+docker compose exec app npx drizzle-kit push
 
-# 4. Verify
-docker-compose ps
-docker-compose logs -f app
+# Verify
+docker compose ps
+docker compose logs -f app
 ```
 
 ### One-Command Update Script
@@ -134,79 +111,78 @@ docker-compose logs -f app
 Create `update.sh`:
 ```bash
 #!/bin/bash
-cd /var/www/Synapsis/docker
-git pull origin main
-docker-compose down
-docker-compose up -d --build
-docker-compose exec -T app npx drizzle-kit push || true
+cd /opt/synapsis
+docker compose pull
+docker compose up -d
+docker compose exec -T app npx drizzle-kit push || true
 echo "✅ Update complete!"
 ```
 
+Make it executable and run:
+```bash
+chmod +x update.sh
+./update.sh
+```
+
 ---
 
 ## 📁 Directory Structure
 
 ```
-/var/www/Synapsis/docker/
-├── docker-compose.yml      # Main orchestration file
-├── Dockerfile              # Multi-stage build
-├── docker-entrypoint.sh    # Startup script
+/opt/synapsis/
+├── docker-compose.yml      # Main orchestration file (downloaded from GitHub)
+├── Caddyfile               # Caddy reverse proxy config
 ├── .env                    # Your environment variables
-├── .env.example            # Template
-├── .dockerignore           # Build exclusions
-├── nginx/
-│   ├── nginx.conf          # Main Nginx config
-│   └── conf.d/
-│       ├── default.conf          # HTTP config
-│       └── default.conf.ssl      # HTTPS config
-└── README.md               # This file
+└── update.sh               # Optional update script
 ```
 
+**Note:** You no longer need to clone the entire Git repository. Just download the three files above.
+
 ---
 
 ## 🛠️ Management Commands
 
 ### View Logs
 ```bash
-docker-compose logs -f app      # Application logs
-docker-compose logs -f nginx    # Nginx logs
-docker-compose logs -f postgres # Database logs
-docker-compose logs -f          # All logs
+docker compose logs -f app      # Application logs
+docker compose logs -f caddy    # Caddy logs
+docker compose logs -f postgres # Database logs
+docker compose logs -f          # All logs
 ```
 
 ### Database Operations
 ```bash
 # Access database shell
-docker-compose exec postgres psql -U synapsis -d synapsis
+docker compose exec postgres psql -U synapsis -d synapsis
 
 # Backup database
-docker-compose exec postgres pg_dump -U synapsis synapsis > backup.sql
+docker compose exec postgres pg_dump -U synapsis synapsis > backup.sql
 
 # Restore database
-docker-compose exec -T postgres psql -U synapsis -d synapsis < backup.sql
+docker compose exec -T postgres psql -U synapsis -d synapsis < backup.sql
 
 # Run migrations manually
-docker-compose exec app npx drizzle-kit push
+docker compose exec app npx drizzle-kit push
 ```
 
 ### Container Management
 ```bash
 # Restart services
-docker-compose restart app
-docker-compose restart nginx
+docker compose restart app
+docker compose restart caddy
 
 # Stop everything
-docker-compose down
+docker compose down
 
 # Stop and remove volumes (⚠️ destroys data!)
-docker-compose down -v
+docker compose down -v
 
 # View running containers
-docker-compose ps
+docker compose ps
 
 # Enter container shell
-docker-compose exec app sh
-docker-compose exec postgres sh
+docker compose exec app sh
+docker compose exec postgres sh
 ```
 
 ---
@@ -215,10 +191,10 @@ docker-compose exec postgres sh
 
 This Docker setup includes:
 
-- **Immutable source code** - Application runs from image, not bind-mounted files
+- **Immutable source code** - Application runs from pre-built image
 - **Non-root execution** - App runs as unprivileged user
 - **Network isolation** - Services communicate via internal Docker network
-- **Rate limiting** - Nginx protects against brute force attacks
+- **Automatic HTTPS** - Caddy handles SSL certificates
 - **Security headers** - X-Frame-Options, X-Content-Type-Options, etc.
 - **Resource limits** - Memory constraints on all containers
 - **Health checks** - Automatic container health monitoring
@@ -230,28 +206,28 @@ This Docker setup includes:
 ### Container won't start
 ```bash
 # Check for configuration errors
-docker-compose config
+docker compose config
 
 # View detailed logs
-docker-compose logs app --tail=100
+docker compose logs app --tail=100
 ```
 
 ### Database connection failed
 ```bash
 # Check database is healthy
-docker-compose ps
+docker compose ps
 
 # Verify environment variables
-docker-compose exec app env | grep DATABASE
+docker compose exec app env | grep DATABASE
 ```
 
 ### SSL certificate issues
 ```bash
-# Test SSL configuration
-docker-compose exec nginx nginx -t
+# Check Caddy logs
+docker compose logs caddy
 
-# Check certificate files
-ls -la certbot_data/live/
+# Test Caddy configuration
+docker compose exec caddy caddy validate --config /etc/caddy/Caddyfile
 ```
 
 ### Port already in use
@@ -262,13 +238,22 @@ sudo netstat -tlnp | grep :80
 # Change ports in docker-compose.yml if needed
 ```
 
+### Image pull fails
+```bash
+# Check if image exists
+docker pull ghcr.io/cyph3rasi/synapsis:latest
+
+# View available tags at:
+# https://github.com/cyph3rasi/synapsis/pkgs/container/synapsis
+```
+
 ---
 
 ## 📊 Monitoring
 
 ### Health Checks
-- App: `http://your-domain/api/health`
-- Nginx: `http://your-domain/nginx-health`
+- App: `https://your-domain.com/api/health`
+- Caddy: Built into the Caddyfile
 
 ### Resource Usage
 ```bash
@@ -285,7 +270,7 @@ docker system df
 
 ### Automated Backup Script
 
-Create `/var/www/Synapsis/docker/backup.sh`:
+Create `/opt/synapsis/backup.sh`:
 ```bash
 #!/bin/bash
 BACKUP_DIR="/var/backups/synapsis"
@@ -293,7 +278,7 @@ DATE=$(date +%Y%m%d_%H%M%S)
 mkdir -p $BACKUP_DIR
 
 # Database backup
-docker-compose exec -T postgres pg_dump -U synapsis synapsis > "$BACKUP_DIR/db_$DATE.sql"
+docker compose exec -T postgres pg_dump -U synapsis synapsis > "$BACKUP_DIR/db_$DATE.sql"
 
 # Uploads backup
 tar -czf "$BACKUP_DIR/uploads_$DATE.tar.gz" -C /var/lib/docker/volumes/synapsis_uploads_data/_data .
@@ -306,17 +291,34 @@ echo "✅ Backup complete: $DATE"
 
 Add to crontab:
 ```bash
-0 2 * * * /var/www/Synapsis/docker/backup.sh >> /var/log/synapsis-backup.log 2>&1
+0 2 * * * /opt/synapsis/backup.sh >> /var/log/synapsis-backup.log 2>&1
 ```
 
 ---
 
+## 🏗️ Building from Source (Advanced)
+
+If you prefer to build the image locally instead of using the pre-built one:
+
+```bash
+# Clone the repository
+git clone https://github.com/cyph3rasi/synapsis.git
+cd synapsis/docker
+
+# Build and run
+docker compose -f docker-compose.build.yml up -d --build
+```
+
+See `docker-compose.yml` in the docker/ directory for the build configuration.
+
+---
+
 ## 📞 Support
 
 For issues or questions:
-1. Check logs: `docker-compose logs -f`
-2. Review configuration: `docker-compose config`
-3. Consult the main Synapsis documentation
+1. Check logs: `docker compose logs -f`
+2. Review configuration: `docker compose config`
+3. Consult the main Synapsis documentation: https://docs.synapsis.social
 
 ---