diff --git a/Dockerfile b/Dockerfile
index 2b2ff76..ae9038c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,6 +4,7 @@ FROM node:20-slim AS base
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
   curl \
+  unzip \
   && rm -rf /var/lib/apt/lists/*
 
 # Install Bun
@@ -34,6 +35,8 @@ COPY --chown=nodeuser:nodeuser . ./
 ARG NODE_ENV=production
 
 # Only essential runtime variables that override unified config defaults
+# Note: VITE_COUCHDB_PASSWORD in ARG/ENV is acceptable for development builds
+# In production, use secrets management instead of build-time arguments
 ARG VITE_COUCHDB_URL
 ARG VITE_COUCHDB_USER
 ARG VITE_COUCHDB_PASSWORD
diff --git a/nginx.conf b/nginx.conf
index a68a810..326f979 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -8,7 +8,7 @@ server {
     gzip on;
     gzip_vary on;
     gzip_min_length 1024;
-    gzip_proxied expired no-cache no-store private must-revalidate auth;
+    gzip_proxied expired no-cache no-store private auth;
     gzip_types
         text/plain
         text/css