diff --git a/Dockerfile b/Dockerfile
index 6d15821..c30063d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -31,7 +31,7 @@ RUN python -m pytest -q -p no:cacheprovider
 
 FROM ${PYTHON_BASE_IMAGE} AS certbot
 ENV PYTHONUNBUFFERED=1 PYTHONDONTWRITEBYTECODE=1
-RUN python -m pip install --no-cache-dir certbot==5.9.0
+RUN python -m pip install --no-cache-dir certbot==5.8.0
 ENTRYPOINT ["certbot"]
 
 FROM runtime AS production
diff --git a/Jenkinsfile b/Jenkinsfile
index 2444574..0e58301 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -23,7 +23,7 @@ pipeline {
         }
         sh '''set -eu
           for file in deploy/*.sh; do bash -n "$file"; done
-          node --test tests/frontend/admin.test.cjs
+          node --test tests/frontend/*.test.cjs
         '''
       }
     }
diff --git a/deploy/compose.gray.yml b/deploy/compose.gray.yml
index d0a4e17..724390b 100644
--- a/deploy/compose.gray.yml
+++ b/deploy/compose.gray.yml
@@ -6,6 +6,8 @@ services:
     pull_policy: never
     restart: unless-stopped
     init: true
+    environment:
+      TZ: Asia/Shanghai
     ports:
       - "127.0.0.1:${HOST_PORT:?HOST_PORT is required}:5000"
     env_file:
diff --git a/docs/deployment.md b/docs/deployment.md
index 44f2c93..dff3644 100644
--- a/docs/deployment.md
+++ b/docs/deployment.md
@@ -4,6 +4,8 @@
 
 应用使用单个 Waitress 进程、8 个线程和 UID 10001，宿主机端口仅绑定回环地址。运行密钥、聊天数据、附件和证书不进入镜像。后台鉴权与会话隔离仍不完整，灰度验收须保留全站密码；此流程不代表已具备面向多个客户开放的权限体系。
 
+容器时区设为 `Asia/Shanghai`，营业时间与聊天时间按中国时间计算。
+
 ## Jenkins 任务
 
 任务名为 `baiyue-logistics-chat-gray`。定义选择 Pipeline script from SCM，本项目 Git 地址为仓库，分支字段为 `${SOURCE_REF}`，脚本路径为 `Jenkinsfile`。公开仓库可匿名读取；转为私有后配置只读 SCM 凭据。