diff --git a/docker/application-prod.yml b/docker/application-prod.yml
new file mode 100644
index 0000000..c1d799a
--- /dev/null
+++ b/docker/application-prod.yml
@@ -0,0 +1,63 @@
+# UserHome 生产配置（线上以 nacos 的 userhome.yaml 为准，本文件是 nacos 不可达时的兜底）
+server:
+  port: 10000
+  servlet:
+    # 对外经 caddy 暴露为 http://home.yunhaixingtong.com/userhome
+    context-path: /userhome
+
+spring:
+  jackson:
+    time-zone: GMT+8
+    date-format: yyyy-MM-dd HH:mm:ss
+  servlet:
+    multipart:
+      max-file-size: 50MB
+      max-request-size: 200MB
+
+  jpa:
+    database: MySQL
+    show-sql: false
+    hibernate:
+      ddl-auto: update
+    database-platform: org.hibernate.dialect.MySQL5InnoDBDialect
+    properties:
+      hibernate:
+        jdbc:
+          time_zone: Asia/Shanghai
+    open-in-view: false
+
+# 单点登录 / 应用间签名鉴权（基础平台 yh-auth / yh-app-auth）
+yh:
+  auth:
+    enabled: true
+  sso:
+    server-url-prefix: http://sso.yunhaixingtong.com/cas/
+    client-host-url: http://home.yunhaixingtong.com/userhome
+    allow-headers: all
+    allow-origins: all
+    url-pattern: /api/*
+    mobi-api-pattern: /mobiapi/*
+  app-auth:
+    enabled: true
+    app-key: 100001
+    app-secret: ec4e860206374c80938719fff8e14a86
+  open:
+    enabled: true
+    base-host: http://base.yunhaixingtong.com
+    base-path: /userbase
+    app-key: 100001
+    app-secret: ec4e860206374c80938719fff8e14a86
+
+# 上传文件落容器卷，compose 里挂到宿主机 ./upload-data
+FILE_PATH: /data/upload
+FILE_WEB_PATH: http://home.yunhaixingtong.com/userhome/upload/
+UPLOAD_WEB_PATH_HTTP: http://home.yunhaixingtong.com/userhome/upload/file/
+# 学校配置接口基址（prod 由 Nacos 覆盖）
+SCH_CONF_URL: ""
+
+logging:
+  level:
+    root: INFO
+    com.yunhai.userhome: info
+  file:
+    path: /app/logs