diff --git a/internal/service/config_preview.go b/internal/service/config_preview.go
index 093ef8e..a4a9c9e 100644
--- a/internal/service/config_preview.go
+++ b/internal/service/config_preview.go
@@ -230,9 +230,22 @@ func (s *ConfigPreviewService) RenderDeviceAssignment(deviceID string) (*ConfigP
         ConfigID:      "assignment_" + deviceID,
         ConfigVersion: time.Now().Format("20060102.150405"),
         DeviceID:      deviceID,
+        Overlays:      s.listAutoOverlays(),
     })
 }
 
+func (s *ConfigPreviewService) listAutoOverlays() []string {
+    // Auto-apply overlays whose name starts with "production_"
+    var out []string
+    overlays, _ := s.assets.ListOverlays()
+    for _, o := range overlays {
+        if strings.HasPrefix(o.Name, "production_") {
+            out = append(out, o.Name)
+        }
+    }
+    return out
+}
+
 func profileOverlayNames(raw map[string]any) []string {
     items, _ := raw["overlays"].([]any)
     if len(items) == 0 {
diff --git a/safesightd-linux-arm64 b/safesightd-linux-arm64
index 4b2cf5e..d6cec5e 100644
Binary files a/safesightd-linux-arm64 and b/safesightd-linux-arm64 differ