diff --git a/playbooks/deploy_OpenObserve_docker.yaml b/playbooks/deploy_OpenObserve_docker.yaml
new file mode 100644
index 0000000..5bef319
--- /dev/null
+++ b/playbooks/deploy_OpenObserve_docker.yaml
@@ -0,0 +1,5 @@
+- name: setup OpenObserve
+  hosts: all
+  become: true
+  roles:
+    - docker/OpenObserve/
diff --git a/playbooks/deploy_Tempo_docker.yaml b/playbooks/deploy_Tempo_docker.yaml
new file mode 100644
index 0000000..a7badf6
--- /dev/null
+++ b/playbooks/deploy_Tempo_docker.yaml
@@ -0,0 +1,5 @@
+- name: setup Tempo
+  hosts: all
+  become: true
+  roles:
+    - docker/Tempo/
diff --git a/playbooks/deploy_VictoriaLogs_docker.yaml b/playbooks/deploy_VictoriaLogs_docker.yaml
new file mode 100644
index 0000000..58eda8f
--- /dev/null
+++ b/playbooks/deploy_VictoriaLogs_docker.yaml
@@ -0,0 +1,5 @@
+- name: setup VictoriaLogs
+  hosts: all
+  become: true
+  roles:
+    - docker/VictoriaLogs/
diff --git a/playbooks/deploy_VictoriaMetrics_docker.yaml b/playbooks/deploy_VictoriaMetrics_docker.yaml
new file mode 100644
index 0000000..6d5efb5
--- /dev/null
+++ b/playbooks/deploy_VictoriaMetrics_docker.yaml
@@ -0,0 +1,5 @@
+- name: setup VictoriaMetrics
+  hosts: all
+  become: true
+  roles:
+    - docker/VictoriaMetrics/
diff --git a/playbooks/deploy_otel_docker.yaml b/playbooks/deploy_otel_docker.yaml
new file mode 100644
index 0000000..1e14904
--- /dev/null
+++ b/playbooks/deploy_otel_docker.yaml
@@ -0,0 +1,5 @@
+- name: setup otel
+  hosts: all
+  become: true
+  roles:
+    - docker/otel/
diff --git a/playbooks/roles/docker/OpenObserve/README.md b/playbooks/roles/docker/OpenObserve/README.md
new file mode 100644
index 0000000..7de9e96
--- /dev/null
+++ b/playbooks/roles/docker/OpenObserve/README.md
@@ -0,0 +1,5 @@
+# OpenObserve (docker)
+
+Placeholder role for docker-compose style deployment of OpenObserve.
+
+Templates include docker-compose.yaml with bootstrap nginx and certbot services mirroring the Zitadel setup.
diff --git a/playbooks/roles/docker/OpenObserve/tasks/main.yml b/playbooks/roles/docker/OpenObserve/tasks/main.yml
new file mode 100644
index 0000000..c4f5488
--- /dev/null
+++ b/playbooks/roles/docker/OpenObserve/tasks/main.yml
@@ -0,0 +1,5 @@
+---
+# TODO: implement docker deployment tasks
+- name: Placeholder task
+  debug:
+    msg: "Role placeholder. Implement docker deployment tasks."
diff --git a/playbooks/roles/docker/OpenObserve/templates/docker-compose.yaml b/playbooks/roles/docker/OpenObserve/templates/docker-compose.yaml
new file mode 100644
index 0000000..580d705
--- /dev/null
+++ b/playbooks/roles/docker/OpenObserve/templates/docker-compose.yaml
@@ -0,0 +1,41 @@
+services:
+  bootstrap-nginx:
+    profiles: ["bootstrap"]
+    image: nginx:mainline-alpine
+    container_name: bootstrap-nginx
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/nginx/nginx.conf:/etc/nginx/nginx.conf"
+      - "{{ zitadel_workspace }}/nginx/conf.d/bootstrap-nginx.conf:/etc/nginx/conf.d/bootstrap-nginx.conf"
+    ports:
+      - "80:80"       # 暂时只占用80
+    networks:
+      - app
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost"]
+      interval: 3s
+      timeout: 2s
+      retries: 10
+      start_period: 3s
+  certbot:
+    profiles: ["bootstrap"]
+    image: certbot/certbot
+    container_name: certbot
+    command: >
+      certonly --webroot
+      --webroot-path=/var/www/certbot
+      --email manbuzhe2009@qq.com
+      --agree-tos
+      --no-eff-email
+      --keep-until-expiring
+      --non-interactive
+      -d {{ zitadel_domain }}
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+    networks:
+      - app
+
+networks:
+  app:
diff --git a/playbooks/roles/docker/Tempo/README.md b/playbooks/roles/docker/Tempo/README.md
new file mode 100644
index 0000000..10e86ec
--- /dev/null
+++ b/playbooks/roles/docker/Tempo/README.md
@@ -0,0 +1,5 @@
+# Tempo (docker)
+
+Placeholder role for docker-compose style deployment of Tempo.
+
+Templates include docker-compose.yaml with bootstrap nginx and certbot services mirroring the Zitadel setup.
diff --git a/playbooks/roles/docker/Tempo/tasks/main.yml b/playbooks/roles/docker/Tempo/tasks/main.yml
new file mode 100644
index 0000000..c4f5488
--- /dev/null
+++ b/playbooks/roles/docker/Tempo/tasks/main.yml
@@ -0,0 +1,5 @@
+---
+# TODO: implement docker deployment tasks
+- name: Placeholder task
+  debug:
+    msg: "Role placeholder. Implement docker deployment tasks."
diff --git a/playbooks/roles/docker/Tempo/templates/docker-compose.yaml b/playbooks/roles/docker/Tempo/templates/docker-compose.yaml
new file mode 100644
index 0000000..580d705
--- /dev/null
+++ b/playbooks/roles/docker/Tempo/templates/docker-compose.yaml
@@ -0,0 +1,41 @@
+services:
+  bootstrap-nginx:
+    profiles: ["bootstrap"]
+    image: nginx:mainline-alpine
+    container_name: bootstrap-nginx
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/nginx/nginx.conf:/etc/nginx/nginx.conf"
+      - "{{ zitadel_workspace }}/nginx/conf.d/bootstrap-nginx.conf:/etc/nginx/conf.d/bootstrap-nginx.conf"
+    ports:
+      - "80:80"       # 暂时只占用80
+    networks:
+      - app
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost"]
+      interval: 3s
+      timeout: 2s
+      retries: 10
+      start_period: 3s
+  certbot:
+    profiles: ["bootstrap"]
+    image: certbot/certbot
+    container_name: certbot
+    command: >
+      certonly --webroot
+      --webroot-path=/var/www/certbot
+      --email manbuzhe2009@qq.com
+      --agree-tos
+      --no-eff-email
+      --keep-until-expiring
+      --non-interactive
+      -d {{ zitadel_domain }}
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+    networks:
+      - app
+
+networks:
+  app:
diff --git a/playbooks/roles/docker/VictoriaLogs/README.md b/playbooks/roles/docker/VictoriaLogs/README.md
new file mode 100644
index 0000000..6ddf8eb
--- /dev/null
+++ b/playbooks/roles/docker/VictoriaLogs/README.md
@@ -0,0 +1,5 @@
+# VictoriaLogs (docker)
+
+Placeholder role for docker-compose style deployment of VictoriaLogs.
+
+Templates include docker-compose.yaml with bootstrap nginx and certbot services mirroring the Zitadel setup.
diff --git a/playbooks/roles/docker/VictoriaLogs/tasks/main.yml b/playbooks/roles/docker/VictoriaLogs/tasks/main.yml
new file mode 100644
index 0000000..c4f5488
--- /dev/null
+++ b/playbooks/roles/docker/VictoriaLogs/tasks/main.yml
@@ -0,0 +1,5 @@
+---
+# TODO: implement docker deployment tasks
+- name: Placeholder task
+  debug:
+    msg: "Role placeholder. Implement docker deployment tasks."
diff --git a/playbooks/roles/docker/VictoriaLogs/templates/docker-compose.yaml b/playbooks/roles/docker/VictoriaLogs/templates/docker-compose.yaml
new file mode 100644
index 0000000..580d705
--- /dev/null
+++ b/playbooks/roles/docker/VictoriaLogs/templates/docker-compose.yaml
@@ -0,0 +1,41 @@
+services:
+  bootstrap-nginx:
+    profiles: ["bootstrap"]
+    image: nginx:mainline-alpine
+    container_name: bootstrap-nginx
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/nginx/nginx.conf:/etc/nginx/nginx.conf"
+      - "{{ zitadel_workspace }}/nginx/conf.d/bootstrap-nginx.conf:/etc/nginx/conf.d/bootstrap-nginx.conf"
+    ports:
+      - "80:80"       # 暂时只占用80
+    networks:
+      - app
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost"]
+      interval: 3s
+      timeout: 2s
+      retries: 10
+      start_period: 3s
+  certbot:
+    profiles: ["bootstrap"]
+    image: certbot/certbot
+    container_name: certbot
+    command: >
+      certonly --webroot
+      --webroot-path=/var/www/certbot
+      --email manbuzhe2009@qq.com
+      --agree-tos
+      --no-eff-email
+      --keep-until-expiring
+      --non-interactive
+      -d {{ zitadel_domain }}
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+    networks:
+      - app
+
+networks:
+  app:
diff --git a/playbooks/roles/docker/VictoriaMetrics/README.md b/playbooks/roles/docker/VictoriaMetrics/README.md
new file mode 100644
index 0000000..9c5c2bc
--- /dev/null
+++ b/playbooks/roles/docker/VictoriaMetrics/README.md
@@ -0,0 +1,5 @@
+# VictoriaMetrics (docker)
+
+Placeholder role for docker-compose style deployment of VictoriaMetrics.
+
+Templates include docker-compose.yaml with bootstrap nginx and certbot services mirroring the Zitadel setup.
diff --git a/playbooks/roles/docker/VictoriaMetrics/tasks/main.yml b/playbooks/roles/docker/VictoriaMetrics/tasks/main.yml
new file mode 100644
index 0000000..c4f5488
--- /dev/null
+++ b/playbooks/roles/docker/VictoriaMetrics/tasks/main.yml
@@ -0,0 +1,5 @@
+---
+# TODO: implement docker deployment tasks
+- name: Placeholder task
+  debug:
+    msg: "Role placeholder. Implement docker deployment tasks."
diff --git a/playbooks/roles/docker/VictoriaMetrics/templates/docker-compose.yaml b/playbooks/roles/docker/VictoriaMetrics/templates/docker-compose.yaml
new file mode 100644
index 0000000..580d705
--- /dev/null
+++ b/playbooks/roles/docker/VictoriaMetrics/templates/docker-compose.yaml
@@ -0,0 +1,41 @@
+services:
+  bootstrap-nginx:
+    profiles: ["bootstrap"]
+    image: nginx:mainline-alpine
+    container_name: bootstrap-nginx
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/nginx/nginx.conf:/etc/nginx/nginx.conf"
+      - "{{ zitadel_workspace }}/nginx/conf.d/bootstrap-nginx.conf:/etc/nginx/conf.d/bootstrap-nginx.conf"
+    ports:
+      - "80:80"       # 暂时只占用80
+    networks:
+      - app
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost"]
+      interval: 3s
+      timeout: 2s
+      retries: 10
+      start_period: 3s
+  certbot:
+    profiles: ["bootstrap"]
+    image: certbot/certbot
+    container_name: certbot
+    command: >
+      certonly --webroot
+      --webroot-path=/var/www/certbot
+      --email manbuzhe2009@qq.com
+      --agree-tos
+      --no-eff-email
+      --keep-until-expiring
+      --non-interactive
+      -d {{ zitadel_domain }}
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+    networks:
+      - app
+
+networks:
+  app:
diff --git a/playbooks/roles/docker/otel/README.md b/playbooks/roles/docker/otel/README.md
new file mode 100644
index 0000000..a6a0dae
--- /dev/null
+++ b/playbooks/roles/docker/otel/README.md
@@ -0,0 +1,5 @@
+# otel (docker)
+
+Placeholder role for docker-compose style deployment of otel.
+
+Templates include docker-compose.yaml with bootstrap nginx and certbot services mirroring the Zitadel setup.
diff --git a/playbooks/roles/docker/otel/tasks/main.yml b/playbooks/roles/docker/otel/tasks/main.yml
new file mode 100644
index 0000000..c4f5488
--- /dev/null
+++ b/playbooks/roles/docker/otel/tasks/main.yml
@@ -0,0 +1,5 @@
+---
+# TODO: implement docker deployment tasks
+- name: Placeholder task
+  debug:
+    msg: "Role placeholder. Implement docker deployment tasks."
diff --git a/playbooks/roles/docker/otel/templates/docker-compose.yaml b/playbooks/roles/docker/otel/templates/docker-compose.yaml
new file mode 100644
index 0000000..580d705
--- /dev/null
+++ b/playbooks/roles/docker/otel/templates/docker-compose.yaml
@@ -0,0 +1,41 @@
+services:
+  bootstrap-nginx:
+    profiles: ["bootstrap"]
+    image: nginx:mainline-alpine
+    container_name: bootstrap-nginx
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/nginx/nginx.conf:/etc/nginx/nginx.conf"
+      - "{{ zitadel_workspace }}/nginx/conf.d/bootstrap-nginx.conf:/etc/nginx/conf.d/bootstrap-nginx.conf"
+    ports:
+      - "80:80"       # 暂时只占用80
+    networks:
+      - app
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost"]
+      interval: 3s
+      timeout: 2s
+      retries: 10
+      start_period: 3s
+  certbot:
+    profiles: ["bootstrap"]
+    image: certbot/certbot
+    container_name: certbot
+    command: >
+      certonly --webroot
+      --webroot-path=/var/www/certbot
+      --email manbuzhe2009@qq.com
+      --agree-tos
+      --no-eff-email
+      --keep-until-expiring
+      --non-interactive
+      -d {{ zitadel_domain }}
+    volumes:
+      - "{{ zitadel_workspace }}/certbot/conf:/etc/letsencrypt"
+      - "{{ zitadel_workspace }}/certbot/www:/var/www/certbot"
+    networks:
+      - app
+
+networks:
+  app: