ci(deploy): narrow image build and document pool settings

Примеры Compose задают пул соединений. Контекст сборки бинарника сужен, зеркало базовых образов обновляется явно, алерты Prometheus дополнены.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/compose/docker-compose.yaml

@@ -9,10 +9,10 @@
 #   docker compose --profile microvps up -d
 #   microVPS ~1 ГиБ + Web UI — docs/quickstart.md и docker-compose.microvps-full.yaml
 #
-# reference: 5× Go (api + scheduler + ingest + render + deploy) + postgres + NATS JetStream + bird2 + agent + web.
-# Async jobs выполняются in-process в evobgp-api (jobs.Registry); NATS — задел под брокер (см. docs/architecture.md).
+# reference: 5× Go (api + scheduler + ingest + render + deploy) + postgres + bird2 + agent + web.
+# Async jobs выполняются in-process в evobgp-api (jobs.Registry); NATS — опция `--profile nats` (см. docs/architecture.md).
 # microvps: evobgp-all + postgres + bird2 + agent (без брокера и без UI).
-# microvps-full: как microvps + evobgp-web-microvps (порт 3000) + nats + prometheus-microvps (порт 9090).
+# microvps-full: как microvps + evobgp-web-microvps (порт 3000) + prometheus-microvps (порт 9090).
 #
 # Опция microVPS_sqlite из плана (без контейнера Postgres): требует реализации store на SQLite в приложении;
 # пока используйте microvps с контейнерным Postgres (единые миграции).
@@ -35,7 +35,6 @@ x-logging: &default-logging
 
 x-env-ref: &env-ref
   EVOBGP_DATABASE_URL: postgres://evobgp:evobgp@postgres:5432/evobgp?sslmode=disable
-  EVOBGP_BROKER_URL: nats://nats:4222
 
 x-env-micro: &env-micro
   EVOBGP_DATABASE_URL: postgres://evobgp:evobgp@postgres:5432/evobgp?sslmode=disable
@@ -67,7 +66,7 @@ services:
           memory: 384M
 
   nats:
-    profiles: ["reference", "microvps-full"]
+    profiles: ["nats"]
     image: nats:2.10-alpine
     restart: unless-stopped
     command: ["-js", "-m", "8222"]
@@ -86,8 +85,6 @@ services:
     depends_on:
       postgres:
         condition: service_healthy
-      nats:
-        condition: service_started
       bird2:
         condition: service_started
     ports:
@@ -99,6 +96,7 @@ services:
       # DEV ONLY — не для production. Bearer dev + слабые demo-секреты (см. docs/access.md).
       EVOBGP_DEV_INSECURE: "1"
       EVOBGP_BIRDC_SOCKET: /run/bird/bird.ctl
+      EVOBGP_TELEMETRY_LOCAL_ID: ${EVOBGP_TELEMETRY_LOCAL_ID:-}
       EVOBGP_BIRDC_INTERVAL: 30s
       EVOBGP_BIRD_ACTIVE_DIR: /etc/bird
       EVOBGP_BIRD_STAGING_DIR: /tmp/evobgp-bird-staging
@@ -120,16 +118,13 @@ services:
     depends_on:
       postgres:
         condition: service_healthy
-      nats:
-        condition: service_started
       evobgp-api:
         condition: service_started
     environment:
       <<: *env-ref
-      # Split deploy: scheduler must enqueue jobs via API, not in-process Registry (ARCH-04).
+      # Trusted DB scheduler enqueues into the shared durable queue; API workers claim jobs.
       EVOBGP_SCHEDULER_STANDALONE: "1"
-      EVOBGP_CONTROL_PLANE_URL: http://evobgp-api:8080
-      EVOBGP_SCHEDULER_BEARER: dev
+      EVOBGP_SCHEDULER_MODE: db
     logging: *default-logging
     deploy:
       resources:
@@ -144,8 +139,6 @@ services:
     depends_on:
       postgres:
         condition: service_healthy
-      nats:
-        condition: service_started
     environment:
       <<: *env-ref
     logging: *default-logging
@@ -162,8 +155,6 @@ services:
     depends_on:
       postgres:
         condition: service_healthy
-      nats:
-        condition: service_started
     environment:
       <<: *env-ref
     logging: *default-logging
@@ -180,8 +171,6 @@ services:
     depends_on:
       postgres:
         condition: service_healthy
-      nats:
-        condition: service_started
     environment:
       <<: *env-ref
       EVOBGP_BIRD_ACTIVE_DIR: /etc/bird
@@ -225,6 +214,7 @@ services:
       EVOBGP_HTTP_ADDR: ":8080"
       EVOBGP_SEED_DEMO: "1"
       EVOBGP_BIRDC_SOCKET: /run/bird/bird.ctl
+      EVOBGP_TELEMETRY_LOCAL_ID: ${EVOBGP_TELEMETRY_LOCAL_ID:-}
       EVOBGP_BIRDC_INTERVAL: 30s
       EVOBGP_BIRD_ACTIVE_DIR: /etc/bird
       EVOBGP_BIRD_STAGING_DIR: /tmp/evobgp-bird-staging
@@ -315,10 +305,12 @@ services:
     volumes:
       - ../prometheus/prometheus-microvps.yml:/etc/prometheus/prometheus.yml:ro
       - ../prometheus/alerts.yml:/etc/prometheus/alerts.yml:ro
+      - prometheus_data:/prometheus
     command:
       - --config.file=/etc/prometheus/prometheus.yml
       - --storage.tsdb.path=/prometheus
       - --storage.tsdb.retention.time=7d
+      - --storage.tsdb.retention.size=${EVOBGP_PROMETHEUS_RETENTION_SIZE:-2GB}
       - --web.enable-lifecycle
     logging: *default-logging
     deploy:
@@ -359,7 +351,7 @@ services:
       - bird_etc:/etc/bird
       - bird_run:/run/bird
     entrypoint: ["/usr/local/bin/evobgp-agent"]
-    command: ["watch", "-socket=/run/bird/bird.ctl", "-watch-interval=30s"]
+    command: ["-socket=/run/bird/bird.ctl", "-watch-interval=30s", "watch"]
     logging: *default-logging
     deploy:
       resources:
@@ -377,10 +369,12 @@ services:
     volumes:
       - ../prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
       - ../prometheus/alerts.yml:/etc/prometheus/alerts.yml:ro
+      - prometheus_data:/prometheus
     command:
       - --config.file=/etc/prometheus/prometheus.yml
       - --storage.tsdb.path=/prometheus
       - --storage.tsdb.retention.time=15d
+      - --storage.tsdb.retention.size=${EVOBGP_PROMETHEUS_RETENTION_SIZE:-2GB}
       - --web.enable-lifecycle
     logging: *default-logging
     deploy:
@@ -390,6 +384,7 @@ services:
 
 volumes:
   pgdata:
+  prometheus_data:
   bird_etc:
   bird_run:
   traefik_letsencrypt: