diff --git a/CLAUDE.md b/CLAUDE.md
index 88f76bc7..0df354cf 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -4,7 +4,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Project Overview
 
-PolyWeather Pro — a paid institutional weather-intelligence terminal. 50 monitored cities with real-time METAR/AMOS/MADIS observations, DEB multi-model temperature blending, Mu probability calibration, and intraday bias correction. Pure meteorological decision workspace; no market/price layer. Next.js 15 + React 19 (Vercel) frontend, FastAPI backend (VPS), Telegram bot.
+PolyWeather Pro — a paid institutional weather-intelligence terminal. 50 monitored cities with real-time METAR/AMOS/MADIS observations, DEB multi-model temperature blending, Mu probability calibration, and intraday bias correction. Pure meteorological decision workspace; no market/price layer. Next.js 15 + React 19 frontend (Docker / VPS, behind Cloudflare + Nginx), FastAPI backend (VPS), Telegram bot.
 
 **Business model**: Paid-only, $10/month, no free tier, no trial. Landing page is public; `/terminal` requires login + active subscription.
 
@@ -47,10 +47,12 @@ docker compose down && docker compose up -d --build
 ## Architecture
 
 ```
-Users → Next.js (Vercel) → FastAPI :8000 (VPS)
-         /terminal (paid gate)    Weather Collector
-         / (landing page)         Analysis (DEB + Mu)
-                                  Payment Layer (USDC on Polygon)
+Users → Cloudflare → Nginx → Docker Compose (VPS)
+                                 ├── Next.js frontend → FastAPI :8000
+                                 │     /terminal (paid gate)    Weather Collector
+                                 │     / (landing page)         Analysis (DEB + Mu)
+                                 │                               Payment Layer (USDC on Polygon)
+                                 └── Redis (SSE event store)
          Telegram Bot → bot_listener.py
 ```
 
diff --git a/README.md b/README.md
index 78842302..ecb6f48f 100644
--- a/README.md
+++ b/README.md
@@ -84,7 +84,7 @@ See: [AGPL-3.0 & Commercial Boundary](docs/OPEN_CORE_POLICY.md)
 
 ```mermaid
 flowchart LR
-    U["Users (Web / Telegram)"] --> FE["Next.js Frontend (Vercel)"]
+    U["Users (Web / Telegram)"] --> FE["Next.js Frontend (Docker / VPS)"]
     U --> BOT["Telegram Bot (VPS)"]
     FE --> API["FastAPI /web/app.py"]
     BOT --> API
diff --git a/README_ZH.md b/README_ZH.md
index 67c59581..470de2be 100644
--- a/README_ZH.md
+++ b/README_ZH.md
@@ -83,7 +83,7 @@
 
 ```mermaid
 flowchart LR
-    U["用户（Web / Telegram）"] --> FE["Next.js 前端（Vercel）"]
+    U["用户（Web / Telegram）"] --> FE["Next.js 前端（Docker / VPS）"]
     U --> BOT["Telegram Bot（VPS）"]
     FE --> API["FastAPI /web/app.py"]
     BOT --> API
@@ -218,7 +218,7 @@ POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com
 - AGPL-3.0 边界：[docs/OPEN_CORE_POLICY.md](docs/OPEN_CORE_POLICY.md)
 - Supabase 接入：[docs/SUPABASE_SETUP_ZH.md](docs/SUPABASE_SETUP_ZH.md)
 - 配置与密钥管理：[docs/CONFIGURATION_ZH.md](docs/CONFIGURATION_ZH.md)
-- 前端部署（Vercel）：[docs/FRONTEND_DEPLOYMENT_ZH.md](docs/FRONTEND_DEPLOYMENT_ZH.md)
+- 前端部署（Docker / VPS）：[docs/FRONTEND_DEPLOYMENT_ZH.md](docs/FRONTEND_DEPLOYMENT_ZH.md)
 - 技术债：[docs/TECH_DEBT_ZH.md](docs/TECH_DEBT_ZH.md)
 - 机场实时数据源：[docs/AIRPORT_REALTIME_SOURCES.md](docs/AIRPORT_REALTIME_SOURCES.md)
 - 机场市场监控（中文）：[docs/AIRPORT_MARKET_MONITOR_ZH.md](docs/AIRPORT_MARKET_MONITOR_ZH.md)
diff --git a/extension/README.md b/extension/README.md
index 5cad0384..85a3e8b3 100644
--- a/extension/README.md
+++ b/extension/README.md
@@ -43,7 +43,7 @@
 
 首次建议打开扩展"选项页"并确认：
 
-- `网站基础地址`：你的前端域名（例如 `https://polyweather-pro.vercel.app`）
+- `网站基础地址`：你的前端域名（例如 `https://polyweather.top`）
 - `API 基础地址`：你的后端 API 域名（若同域也可填前端域名）
 - `Bearer Token`：后端开启鉴权时填写
 
diff --git a/extension/options.html b/extension/options.html
index 8444500e..22531bbf 100644
--- a/extension/options.html
+++ b/extension/options.html
@@ -12,12 +12,12 @@
 
       <label class="field">
         <span id="siteBaseLabel">Site Base URL</span>
-        <input id="siteBaseInput" type="text" placeholder="https://polyweather-pro.vercel.app" />
+        <input id="siteBaseInput" type="text" placeholder="https://polyweather.top" />
       </label>
 
       <label class="field">
         <span id="apiBaseLabel">API Base URL</span>
-        <input id="apiBaseInput" type="text" placeholder="https://polyweather-pro.vercel.app" />
+        <input id="apiBaseInput" type="text" placeholder="https://polyweather.top" />
       </label>
 
       <label class="field">
diff --git a/extension/options.js b/extension/options.js
index 4f3debcf..079168f6 100644
--- a/extension/options.js
+++ b/extension/options.js
@@ -1,6 +1,6 @@
 const DEFAULT_CONFIG = {
-  apiBase: "https://polyweather-pro.vercel.app",
-  siteBase: "https://polyweather-pro.vercel.app",
+  apiBase: "https://polyweather.top",
+  siteBase: "https://polyweather.top",
   authToken: "",
   selectedCity: ""
 };
diff --git a/extension/sidepanel.js b/extension/sidepanel.js
index 4394d3b9..04998e92 100644
--- a/extension/sidepanel.js
+++ b/extension/sidepanel.js
@@ -1,8 +1,8 @@
 const DEFAULT_CONFIG = {
-  apiBase: "https://polyweather-pro.vercel.app",
+  apiBase: "https://polyweather.top",
   authToken: "",
   selectedCity: "",
-  siteBase: "https://polyweather-pro.vercel.app"
+  siteBase: "https://polyweather.top"
 };
 const CACHE_VERSION = "v3";
 const locale = String(navigator.language || "en").toLowerCase().startsWith("zh")
diff --git a/frontend/app/api/analytics/events/route.ts b/frontend/app/api/analytics/events/route.ts
index a4f909dc..ef0fbad0 100644
--- a/frontend/app/api/analytics/events/route.ts
+++ b/frontend/app/api/analytics/events/route.ts
@@ -55,10 +55,7 @@ export async function POST(req: NextRequest) {
       ...(body ?? {}),
       payload: {
         ...payload,
-        cf_country:
-          req.headers.get("cf-ipcountry") ||
-          req.headers.get("x-vercel-ip-country") ||
-          "",
+        cf_country: req.headers.get("cf-ipcountry") || "",
         user_agent: req.headers.get("user-agent") || "",
         referer_header: req.headers.get("referer") || "",
       },
diff --git a/frontend/app/api/auth/me/route.ts b/frontend/app/api/auth/me/route.ts
index bfe5da1d..a3f2dab3 100644
--- a/frontend/app/api/auth/me/route.ts
+++ b/frontend/app/api/auth/me/route.ts
@@ -165,10 +165,7 @@ async function trackAuthDiagnosticEvent(
           response_mode: responseMode,
           user_id: normalizedUserId || undefined,
           email_domain: email?.includes("@") ? email.split("@").pop() : undefined,
-          cf_country:
-            req.headers.get("cf-ipcountry") ||
-            req.headers.get("x-vercel-ip-country") ||
-            "",
+          cf_country: req.headers.get("cf-ipcountry") || "",
           user_agent: req.headers.get("user-agent") || "",
           referer_header: req.headers.get("referer") || "",
           captured_at: new Date().toISOString(),
diff --git a/frontend/app/api/ops/subscriptions/grant/route.ts b/frontend/app/api/ops/subscriptions/grant/route.ts
index 0d5106fb..f76a7123 100644
--- a/frontend/app/api/ops/subscriptions/grant/route.ts
+++ b/frontend/app/api/ops/subscriptions/grant/route.ts
@@ -41,7 +41,7 @@ async function findSupabaseUserIdByEmail(email: string) {
     .replace(/\/$/, "");
   const serviceRoleKey = String(process.env.SUPABASE_SERVICE_ROLE_KEY || "").trim();
   if (!supabaseUrl || !serviceRoleKey) {
-    throw new Error("Supabase service role is not configured on Vercel");
+    throw new Error("Supabase service role is not configured on the server");
   }
   const profileRes = await fetch(
     `${supabaseUrl}/rest/v1/profiles?select=id&email=eq.${encodeURIComponent(email)}&limit=1`,
diff --git a/frontend/public/sw.js b/frontend/public/sw.js
index 394a47e8..7f38844f 100644
--- a/frontend/public/sw.js
+++ b/frontend/public/sw.js
@@ -34,8 +34,8 @@ self.addEventListener("fetch", (event) => {
 
   // Do not cache-first Next.js build chunks. A user can keep an old app shell
   // open across deployments; if checkout UI is loaded later, stale/missing
-  // chunks surface as a generic page fault. Let the browser/Vercel handle
-  // immutable _next/static asset caching instead.
+  // chunks surface as a generic page fault. Let the browser handle immutable
+  // _next/static asset caching instead.
   if (CACHEABLE_PUBLIC_ASSETS.includes(url.pathname)) {
     event.respondWith(
       caches.open(CACHE_NAME).then((cache) =>