Blue-green deploys — zero-downtime container swaps with nginx

Two containers behind one nginx upstream, atomic switch via reload, parallel run for soak time, kill the old. Production deploys without dropping a single request.