diff --git a/PLAN.md b/PLAN.md
index b1f0584..08a34a5 100644
--- a/PLAN.md
+++ b/PLAN.md
@@ -40,6 +40,7 @@
 - Added a Traefik compose override sample at `compose.traefik.yml.sample` for production routing and proxy-network attachment.
 - The production launcher now targets only `db`, `backend`, and `frontend`, keeping the dev Caddy proxy out of the production path.
 - The Caddy proxy service now runs only under the `dev` compose profile, and `scripts/dev-up.sh` enables that profile automatically.
+- The Traefik production override now builds the frontend into a static Nginx image and clears the dev-facing published ports.
 
 ## Storage Status
 - Backend media persists in the `backend-media` named Docker volume.
diff --git a/README.md b/README.md
index d740436..8410436 100644
--- a/README.md
+++ b/README.md
@@ -33,6 +33,7 @@ WalkUp is a collaborative baseball walk-up song app built as a React PWA with a
 
 ## Production
 - Copy `compose.traefik.yml.sample` to `compose.traefik.yml` and adjust it for your deployment.
+- The sample routes `backend` and `frontend` through Traefik, builds the frontend as a static Nginx image, and keeps the published ports off the host.
 - `./scripts/prod-up.sh` starts `db`, `backend`, and `frontend` in detached mode with that Traefik override.
 - Use `docker compose logs db backend frontend` when you need live service output from that detached stack.