diff --git a/docker-compose.yml b/docker-compose.yml
index 26b0bc3..21b4eeb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,6 +3,13 @@ services:
     build: ./agent_platform
     expose:
       - "8000"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME:-agent-platform}.rule=Host(`${FQDN:-staging.agent-platform.media-on.de}`)"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME:-agent-platform}.entrypoints=websecure"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME:-agent-platform}.tls=true"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME:-agent-platform}.tls.certresolver=letsencrypt"
+      - "traefik.http.services.${COMPOSE_PROJECT_NAME:-agent-platform}.loadbalancer.server.port=8000"
     environment:
       - HOST=${HOST:-0.0.0.0}
       - PORT=${PORT:-8000}
diff --git a/docs/deployment_report.md b/docs/deployment_report.md
new file mode 100644
index 0000000..1ea83f4
--- /dev/null
+++ b/docs/deployment_report.md
@@ -0,0 +1,26 @@
+# Deployment Report — agent-platform v0
+
+## Result
+- Status: SUCCESS (staging)
+- URL: https://staging.agent-platform.media-on.de
+- Commit: 4847d3e (initial Gate 3 deploy)
+- Timestamp: 2026-07-06 00:35 CEST
+- Coolify project UUID: xht8vwszdqrk9biytxzsopu6
+- Coolify resource UUID: n27nquozfhcgbph182ivbht3
+- Image tag: 4847d3eb05ab324273d80c4594956b1a79483fe9
+- Containers: agent-platform (healthy), mcp-tools (healthy)
+
+## Verification
+- `GET /health` → 200, body: `{"status":"ok","agents":1,"agent_ids":["example"],"mcp_server":"reachable","llm_model":"deepseek/deepseek-v4-flash"}`
+- `GET /api/agents` (Bearer w6MdBRFIAVNVjxG8XfX-wZHqI4x1pGxmNcKbLaHA0W0) → 200, 1 agent (id=example, source=code, 6 allowed_tools)
+- mcp_server=reachable confirms B3 fix (MCP_SERVER_URL=/mcp path) works
+
+## Caveats
+1. Coolify v4 dockercompose bug: build_pack strips Traefik `loadbalancer.server.port` label on `expose`. Hotfix applied on host by deploy_agent — durable fix in THIS commit (Traefik labels via env interpolation). Next deploy should be green without host patches.
+2. `LLM_API_KEY` empty in Coolify env → chat endpoints 500 until user pastes openrouter key in Coolify UI.
+3. Live-host compose patch (added missing load-balancer labels + python3 healthchecks) lives only on coolify-01 at `/data/coolify/applications/<uuid>/docker-compose.yaml` — this commit fixes it in source so future deploys stay clean.
+
+## Next
+- User pastes LLM_API_KEY in Coolify UI
+- Re-run compose deploy to verify label fix survives rebuild
+- pytest suite (test_debug_engineer)