diff --git a/DOCKER.md b/DOCKER.md
index 4a833a0..eb9d3a1 100755
--- a/DOCKER.md
+++ b/DOCKER.md
@@ -37,6 +37,8 @@ A Docker stack a következő szolgáltatásokat indítja:
 - Username: `admin`
 - Password: `admin123`
 
+**Payload CMS admin** (http://localhost:8080/admin): nincs előre létrehozott felhasználó — az első betöltéskor a Payload felkínálja az admin fiók létrehozását. A `docker-compose.dev.yml` egy fix, nem titkos `PAYLOAD_SECRET`-et ad át (MITHOME-97) — staging/production környezetben ez kötelezően a saját `.env.<env>` fájlból jön, nincs alapértelmezett érték (a konténer el sem indul nélküle).
+
 ## 📊 MongoDB Hozzáférés
 
 ### 1. Mongo Express Web UI
diff --git a/docker-compose.dev.yml b/docker-compose.dev.yml
index 01a074b..4a4fb43 100755
--- a/docker-compose.dev.yml
+++ b/docker-compose.dev.yml
@@ -1,5 +1,3 @@
-version: '3.8'
-
 services:
   # Next.js Application
   app:
@@ -18,6 +16,9 @@ services:
       # with "Command find requires authentication" (MITHOME-98).
       - MONGODB_URI=mongodb://admin:password123@mongodb:27017/mozdit?authSource=admin
       - MONGODB_DB=mozdit
+      # Dev-only, nem titkos (MITHOME-97) — Payload ez nélkül el sem indul
+      # ("missing secret key"), és ez a compose fájl eddig nem adta át.
+      - PAYLOAD_SECRET=dev-only-insecure-secret-do-not-use-in-staging-or-prod
       - NEXT_PUBLIC_SITE_URL=http://localhost:8080
       - NEXT_PUBLIC_COMPANY_NAME=mozdIT Bt.
       - NEXT_PUBLIC_CONTACT_EMAIL=info@mozdit.hu
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 76640de..817b4c8 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -17,10 +17,17 @@ services:
       # unauthenticated default URI would silently break the app — fail loudly instead.
       - MONGODB_URI=${MONGODB_URI}
       - MONGODB_DB=${MONGODB_DB:-mozdit}
+      # No fallback either (MITHOME-97): Payload refuses to start without a real
+      # secret ("missing secret key"), which is exactly what we want here.
+      - PAYLOAD_SECRET=${PAYLOAD_SECRET}
       - NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL:-https://mozdit.hu}
       - NEXT_PUBLIC_COMPANY_NAME=${NEXT_PUBLIC_COMPANY_NAME:-mozdIT Bt.}
       - NEXT_PUBLIC_CONTACT_EMAIL=${NEXT_PUBLIC_CONTACT_EMAIL:-info@mozdit.hu}
       - LOKI_HOST=${LOKI_HOST:-http://loki:3100}
+    volumes:
+      # Payload helyi upload storage — lásd docker-compose.staging.yml azonos
+      # kommentjét (MITHOME-97).
+      - media_data_prod:/app/media
     depends_on:
       - mongodb
     networks:
@@ -52,6 +59,8 @@ services:
 volumes:
   mongodb_data_prod:
     driver: local
+  media_data_prod:
+    driver: local
 
 networks:
   mozdit-network:
diff --git a/docker-compose.staging.yml b/docker-compose.staging.yml
index 1535fb5..9102aeb 100644
--- a/docker-compose.staging.yml
+++ b/docker-compose.staging.yml
@@ -18,11 +18,20 @@ services:
       # unauthenticated default URI would silently break the app — fail loudly instead.
       - MONGODB_URI=${MONGODB_URI}
       - MONGODB_DB=${MONGODB_DB:-mozdit}
+      # No fallback either (MITHOME-97): Payload refuses to start without a real
+      # secret ("missing secret key"), which is exactly what we want here.
+      - PAYLOAD_SECRET=${PAYLOAD_SECRET}
       - NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL:-https://stage.mozdit.hu}
       - NEXT_PUBLIC_DEPLOY_ENV=staging
       - NEXT_PUBLIC_COMPANY_NAME=${NEXT_PUBLIC_COMPANY_NAME:-mozdIT Bt.}
       - NEXT_PUBLIC_CONTACT_EMAIL=${NEXT_PUBLIC_CONTACT_EMAIL:-info@mozdit.hu}
       - LOKI_HOST=${LOKI_HOST:-http://loki:3100}
+    volumes:
+      # Payload helyi upload storage (proto/src/collections/Media.ts) — futásidőben
+      # a konténer WORKDIR-je (/app) alatti media/ mappába ír. Named volume nélkül
+      # a `deploy.sh` minden újratelepítéskor (--force-recreate) elveszítené a
+      # korábban feltöltött logókat/képeket (MITHOME-97).
+      - media_data_staging:/app/media
     depends_on:
       - mongodb
     networks:
@@ -54,6 +63,8 @@ services:
 volumes:
   mongodb_data_staging:
     driver: local
+  media_data_staging:
+    driver: local
 
 networks:
   mozdit-network-staging:
diff --git a/proto/src/app/(frontend)/[locale]/[slug]/page.tsx b/proto/src/app/(frontend)/[locale]/[slug]/page.tsx
index 6b7b614..f76740a 100644
--- a/proto/src/app/(frontend)/[locale]/[slug]/page.tsx
+++ b/proto/src/app/(frontend)/[locale]/[slug]/page.tsx
@@ -4,7 +4,7 @@ import AboutView from '@/components/views/AboutView'
 import ServicesView from '@/components/views/ServicesView'
 import ContactView from '@/components/views/ContactView'
 import LegalPageView from '@/components/views/LegalPageView'
-import { LOCALES, PAGE_SLUGS, resolvePageKey, isLocale, type Locale, type PageKey } from '@/lib/i18n'
+import { resolvePageKey, isLocale, type Locale } from '@/lib/i18n'
 import {
   getAboutContent,
   getServicesContent,
@@ -17,14 +17,9 @@ import { siteConfig, getOgLocale } from '@/config/site'
 
 type Params = { locale: string; slug: string }
 
-export function generateStaticParams() {
-  return LOCALES.flatMap((locale) =>
-    (Object.keys(PAGE_SLUGS) as PageKey[]).map((key) => ({
-      locale,
-      slug: PAGE_SLUGS[key][locale],
-    }))
-  )
-}
+// WHY force-dynamic: lásd ../layout.tsx — nincs generateStaticParams, minden
+// kérés élőben olvassa a Payload-ot, admin publikálás azonnal látszik.
+export const dynamic = 'force-dynamic'
 
 const LEGAL_META: Record<'privacy' | 'terms', Record<Locale, string>> = {
   privacy: {
diff --git a/proto/src/app/(frontend)/[locale]/layout.tsx b/proto/src/app/(frontend)/[locale]/layout.tsx
index 07447fb..b5da35d 100644
--- a/proto/src/app/(frontend)/[locale]/layout.tsx
+++ b/proto/src/app/(frontend)/[locale]/layout.tsx
@@ -1,13 +1,18 @@
 import { notFound } from 'next/navigation'
 import Header from '../../../components/Header'
 import Footer from '../../../components/Footer'
-import { LOCALES, isLocale, localePath, type Locale } from '@/lib/i18n'
+import { isLocale, localePath, type Locale } from '@/lib/i18n'
 import { getCommonContent, getHomeContent } from '@/lib/payload-content'
 import { siteConfig, getMainNavigation, getFooterNavigation, getFooterLegalLinks, getSiteDescription } from '@/config/site'
 
-export function generateStaticParams() {
-  return LOCALES.map((locale) => ({ locale }))
-}
+// WHY force-dynamic (MITHOME-97): ezek az oldalak a Payload Local API-t hívják
+// (élő MongoDB-olvasás). generateStaticParams + SSG mellett a build időben
+// sütött ki minden oldal, és a Payload adminban végzett publikálás csak egy
+// teljes redeploy után jelent volna meg a publikus oldalon — ez pont az
+// ellentéte az önkiszolgáló szerkesztés céljának, amiért a Payload-migráció
+// történt. force-dynamic-kal minden kérés friss Payload-olvasást kap, és a
+// Docker build sem függ többé egy build-idejű MongoDB-kapcsolattól.
+export const dynamic = 'force-dynamic'
 
 export default async function LocaleLayout({
   children,
diff --git a/proto/src/app/(frontend)/[locale]/page.tsx b/proto/src/app/(frontend)/[locale]/page.tsx
index 428ad9c..dcc08d0 100755
--- a/proto/src/app/(frontend)/[locale]/page.tsx
+++ b/proto/src/app/(frontend)/[locale]/page.tsx
@@ -7,6 +7,9 @@ import { notFound } from 'next/navigation'
 
 type Params = { locale: string }
 
+// WHY force-dynamic: lásd [slug]/page.tsx és ../layout.tsx.
+export const dynamic = 'force-dynamic'
+
 export async function generateMetadata({ params }: { params: Promise<Params> }): Promise<Metadata> {
   const { locale: rawLocale } = await params
   if (!isLocale(rawLocale)) return {}