diff --git a/skills-dev/dev-cicd-plugin/skills/SKILL.md b/skills-dev/dev-cicd-plugin/skills/SKILL.md
index e6ec71f..1f5f7bf 100644
--- a/skills-dev/dev-cicd-plugin/skills/SKILL.md
+++ b/skills-dev/dev-cicd-plugin/skills/SKILL.md
@@ -308,7 +308,9 @@ Pipeline 失败
     ├── "port already in use" → docker compose down 先停旧容器
     ├── "no such service: xxx" → 服务器 compose 与 CI 配置不一致
     ├── health check 失败但容器在跑 → curl URL 的端口与实际服务端口不匹配
-    └── --no-deps 跳过了 nginx → health check 走 port 80 但 nginx 未启动
+    ├── --no-deps 跳过了 nginx → health check 走 port 80 但 nginx 未启动
+    ├── gateway 无端口映射 → prod compose 不暴露端口，用 docker exec 检查
+    └── nginx crash "upstream not allowed" → nginx.conf mount 到 /etc/nginx/nginx.conf 覆盖主配置，改 /etc/nginx/conf.d/default.conf
 ```
 
 ### 3.2 常见错误速查
@@ -329,6 +331,8 @@ Pipeline 失败
 | health check 失败但容器在跑 | curl URL 端口 ≠ 服务端口 | 检查 nginx(80) vs gateway(8080)，直接 `curl :8080/health` |
 | `--no-deps` 后 nginx 没启动 | nginx 被 no-deps 跳过 | 显式加 `--no-deps gateway web nginx` |
 | `no such service: xxx` | 服务器 compose 缺 service | SSH 检查实际 compose 文件 |
+| gateway healthy 但 curl 不通 | prod compose 无端口映射 | `docker exec <container> wget -q -O- localhost:8080/health` |
+| nginx `upstream not allowed` | nginx.conf mount 到 /etc/nginx/nginx.conf | 改 mount 到 `/etc/nginx/conf.d/default.conf` |
 | `missing icon file 120x120` | 无 App Icon asset | 创建 Assets.xcassets + AppIcon |
 | `UIInterfaceOrientation` iPad | 缺 iPad 方向声明 | 四方向 + `UIRequiresFullScreen` |