diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 795cf34..c6b15c7 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -110,6 +110,9 @@ jobs:
           # namespace/凭据仍用顶层 SPRING_CLOUD_NACOS_* env（bootstrap 的 ${...} 占位符才能解析到）
           docker run -d --name userbase-service --restart unless-stopped --network infra-infra-net -p 8060:8060 \
             --add-host sso.yunhaixingtong.com:192.168.10.160 \
+            --memory=1.5g --memory-swap=1.5g \
+            -v /data/logs/userbase:/app/logs \
+            -e JAVA_OPTS="-Xms512m -Xmx1024m -XX:MaxMetaspaceSize=256m" \
             -e SPRING_PROFILES_ACTIVE=prod \
             -e NACOS_CONFIG_ENABLED=true \
             -e NACOS_ADDR=nacos:8848 \
@@ -133,6 +136,9 @@ jobs:
             # 回滚也必须注入同样的 env，否则 bootstrap 默认 enabled=false 会连不上 nacos 拉不到线上配置
             docker run -d --name userbase-service --restart unless-stopped --network infra-infra-net -p 8060:8060 \
               --add-host sso.yunhaixingtong.com:192.168.10.160 \
+              --memory=1.5g --memory-swap=1.5g \
+              -v /data/logs/userbase:/app/logs \
+              -e JAVA_OPTS="-Xms512m -Xmx1024m -XX:MaxMetaspaceSize=256m" \
               -e SPRING_PROFILES_ACTIVE=prod \
               -e NACOS_CONFIG_ENABLED=true \
               -e NACOS_ADDR=nacos:8848 \
diff --git a/docker/application-prod.yml b/docker/application-prod.yml
index 51bda44..80bb6d3 100644
--- a/docker/application-prod.yml
+++ b/docker/application-prod.yml
@@ -84,3 +84,5 @@ UPLOAD_WEB_PATH_HTTP: http://base.yunhaixingtong.com/userbase/upload/file/
 logging:
   level:
     root: INFO
+  file:
+    path: /app/logs