diff --git a/docs/04-configuration/MEV_CONTROL_LAN_BRINGUP_CHECKLIST.md b/docs/04-configuration/MEV_CONTROL_LAN_BRINGUP_CHECKLIST.md
index 72c370be..24e764a0 100644
--- a/docs/04-configuration/MEV_CONTROL_LAN_BRINGUP_CHECKLIST.md
+++ b/docs/04-configuration/MEV_CONTROL_LAN_BRINGUP_CHECKLIST.md
@@ -62,12 +62,12 @@ Default CT identity:
 The provisioner creates an unprivileged Debian 12 CT with:
 
 - `16` vCPU
-- `32 GiB` RAM
-- `8 GiB` swap
+- `72 GiB` RAM
+- `0 GiB` swap by default
 - `200 GiB` rootfs
 - `nesting=1,keyctl=1`
 
-These defaults are intentionally generous for the first contained deployment and can be tuned later.
+These defaults reflect the current stable allocation for CT `2421` after live pressure remediation. Keep the backend on `72 GiB` unless host capacity becomes constrained enough to justify a deliberate retune.
 
 ## 3. Paths inside the backend CT
 
diff --git a/scripts/deployment/provision-mev-control-backend-lxc.sh b/scripts/deployment/provision-mev-control-backend-lxc.sh
index da4bde26..92539ff1 100644
--- a/scripts/deployment/provision-mev-control-backend-lxc.sh
+++ b/scripts/deployment/provision-mev-control-backend-lxc.sh
@@ -44,8 +44,8 @@ else
 set -euo pipefail
 pct create ${VMID} ${TEMPLATE_CT} \\
   --hostname ${HOSTNAME_CT} \\
-  --memory 32768 \\
-  --swap 8192 \\
+  --memory 73728 \\
+  --swap 0 \\
   --cores 16 \\
   --rootfs ${STORAGE}:200 \\
   --net0 name=eth0,bridge=${NETWORK},ip=${IP_CT}/24,gw=${GATEWAY} \\
diff --git a/scripts/deployment/run-mev-post-deploy-cutover-ct2421.sh b/scripts/deployment/run-mev-post-deploy-cutover-ct2421.sh
index 0fe30e5f..f4af03d9 100755
--- a/scripts/deployment/run-mev-post-deploy-cutover-ct2421.sh
+++ b/scripts/deployment/run-mev-post-deploy-cutover-ct2421.sh
@@ -157,7 +157,7 @@ PATCH_CMD+=(--apply)
 CT_VERIFY_CMD=$(cat <<EOF
 set -euo pipefail
 printf '== env ==\n'
-grep -E '^(MEV_CONFIG|MEV_ADMIN_PORT|MEV_SUPERVISOR_PORT|MEV_SUPERVISOR_URL|MEV_SUBMIT_DISABLED|MEV_ADMIN_API_KEY|MEV_EXECUTOR_PRIVATE_KEY)=' /etc/mev-platform/backend.env || true
+grep -E '^(MEV_CONFIG|MEV_ADMIN_PORT|MEV_SUPERVISOR_PORT|MEV_SUPERVISOR_URL|MEV_SUPERVISOR_BIN_DIR|MEV_SUBMIT_DISABLED|MEV_ADMIN_API_KEY|MEV_EXECUTOR_PRIVATE_KEY)=' /etc/mev-platform/backend.env || true
 printf '\n== services ==\n'
 systemctl restart mev-supervisor.service
 systemctl restart mev-admin-api.service
diff --git a/scripts/nginx-proxy-manager/configure-npmplus-domains.js b/scripts/nginx-proxy-manager/configure-npmplus-domains.js
index 6be1dbfe..4ccfe694 100755
--- a/scripts/nginx-proxy-manager/configure-npmplus-domains.js
+++ b/scripts/nginx-proxy-manager/configure-npmplus-domains.js
@@ -52,7 +52,7 @@ const DOMAINS = [
   { domain: 'd-bis.org', target: 'http://192.168.11.54:3001', websocket: false }, // Gov Portals DBIS VMID 7804
   { domain: 'www.d-bis.org', target: 'http://192.168.11.54:3001', websocket: false },
   { domain: 'admin.d-bis.org', target: 'http://192.168.11.130:80', websocket: false },
-  { domain: 'core.d-bis.org', target: 'http://192.168.11.155:3000', websocket: false },
+  { domain: 'core.d-bis.org', target: 'http://192.168.11.130:80', websocket: false }, // VMID 10130: dbis-frontend
   { domain: 'dbis-admin.d-bis.org', target: 'http://192.168.11.130:80', websocket: false }, // VMID 10130: dbis-frontend
   { domain: 'dbis-api.d-bis.org', target: 'http://192.168.11.155:3000', websocket: false }, // VMID 10150: dbis-api-primary
   { domain: 'dbis-api-2.d-bis.org', target: 'http://192.168.11.156:3000', websocket: false }, // VMID 10151: dbis-api-secondary