feat(mcp): подготовить сервер и доступ к приёмке

deploy/docker-compose.netflow-agent.yml

@@ -0,0 +1,27 @@
+# Optional addition to docker-compose.cdn-mm.yml. Run the exported installer first.
+# Keep this file in every subsequent docker compose -f invocation.
+services:
+  netflow-agent:
+    image: git.shx.one/denozord/mikrotikmanager-netflow-agent:${MM_NETFLOW_AGENT_IMAGE_TAG:-latest}
+    container_name: mmapp-netflow-agent
+    restart: unless-stopped
+    network_mode: host
+    cap_drop: [ALL]
+    cap_add: [NET_ADMIN]
+    security_opt: ["no-new-privileges:true"]
+    read_only: true
+    tmpfs: ["/tmp:rw,noexec,nosuid,size=8m"]
+    volumes:
+      - ./data/netflow-wireguard:/etc/wireguard
+      - ./data/netflow-agent-socket:/run/mm-netflow-host
+    logging:
+      driver: json-file
+      options: {max-size: "5m", max-file: "2"}
+  backend:
+    environment:
+      FLOW_AGENT_SOCKET: /run/mm-netflow-host/agent.sock
+    volumes:
+      - ./data/netflow-agent-socket:/run/mm-netflow-host:ro
+    depends_on:
+      netflow-agent:
+        condition: service_healthy