Check out the guide I wrote about your options for this: https://www.enterpriseready.io/features/deployment-options/
Docker/Swarm/Kubernetes is definitely becoming the standard for modern on-prem deployments. You keep the software in sync by delivering new versions of the manifest regularly (you can even have these automatically applied w/ zero-downtime if you're doing automation correctly).