feat: CI/CD pipeline + Learning/Medicine/Travel services

- Add Gitea Actions workflow for automated build & deploy - Add K8s manifests: webui, travel-svc, medicine-svc, sandbox-svc - Update kustomization for localhost:5000 registry - Add ingress for gooseek.ru and api.gooseek.ru - Learning cabinet with onboarding, courses, sandbox integration - Medicine service with symptom analysis and doctor matching - Travel service with itinerary planning - Server setup scripts (NVIDIA/CUDA, K3s, Gitea runner) Made-with: Cursor
2026-03-02 20:25:44 +03:00
parent 08bd41e75c
commit ab48a0632b
92 changed files with 15562 additions and 2198 deletions
--- a/backend/deploy/docker/docker-compose.yml
+++ b/backend/deploy/docker/docker-compose.yml
@@ -5,11 +5,11 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=auth-svc
      - PORT=3050
-      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
-      - JWT_SECRET=${JWT_SECRET}
+      - AUTH_SVC_URL=http://auth-svc:3050
    ports:
      - "3050:3050"
    depends_on:
@@ -26,6 +26,7 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=api-gateway
      - PORT=3015
@@ -39,9 +40,10 @@ services:
      - DISCOVER_SVC_URL=http://discover-svc:3002
      - FINANCE_HEATMAP_SVC_URL=http://finance-heatmap-svc:3033
      - LEARNING_SVC_URL=http://learning-svc:3034
+      - SANDBOX_SVC_URL=http://sandbox-svc:3036
      - TRAVEL_SVC_URL=http://travel-svc:3035
+      - MEDICINE_SVC_URL=http://medicine-svc:3037
      - ADMIN_SVC_URL=http://admin-svc:3040
-      - JWT_SECRET=${JWT_SECRET}
      - REDIS_URL=redis://redis:6379
    ports:
      - "3015:3015"
@@ -52,6 +54,7 @@ services:
      - thread-svc
      - admin-svc
      - travel-svc
+      - medicine-svc
      - redis
    networks:
      - gooseek
@@ -60,10 +63,10 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.chat-svc
+    env_file: ../../../.env
    environment:
      - SERVICE=chat-svc
      - PORT=3005
-      - JWT_SECRET=${JWT_SECRET}
      - AUTH_SVC_URL=http://auth-svc:3050
      - MASTER_AGENTS_SVC_URL=http://agent-svc:3018
      - DISCOVER_SVC_URL=http://discover-svc:3002
@@ -79,23 +82,15 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.agent-svc
+    env_file: ../../../.env
    environment:
      - SERVICE=agent-svc
      - PORT=3018
-      - JWT_SECRET=${JWT_SECRET}
      - AUTH_SVC_URL=http://auth-svc:3050
      - SEARXNG_URL=http://searxng:8080
      - DISCOVER_SVC_URL=http://discover-svc:3002
      - CRAWL4AI_URL=http://crawl4ai:11235
      - TRAVEL_SVC_URL=http://travel-svc:3035
-      - TRAVELPAYOUTS_TOKEN=${TRAVELPAYOUTS_TOKEN}
-      - TRAVELPAYOUTS_MARKER=${TRAVELPAYOUTS_MARKER}
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
-      - GEMINI_API_KEY=${GEMINI_API_KEY}
-      - TIMEWEB_API_BASE_URL=${TIMEWEB_API_BASE_URL}
-      - TIMEWEB_AGENT_ACCESS_ID=${TIMEWEB_AGENT_ACCESS_ID}
-      - TIMEWEB_API_KEY=${TIMEWEB_API_KEY}
    ports:
      - "3018:3018"
    depends_on:
@@ -111,6 +106,7 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.search-svc
+    env_file: ../../../.env
    environment:
      - SERVICE=search-svc
      - PORT=3001
@@ -126,12 +122,10 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=llm-svc
      - PORT=3020
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
-      - GEMINI_API_KEY=${GEMINI_API_KEY}
    ports:
      - "3020:3020"
    networks:
@@ -141,6 +135,7 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=scraper-svc
      - PORT=3021
@@ -154,6 +149,7 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.discover-svc
+    env_file: ../../../.env
    environment:
      - SERVICE=discover-svc
      - PORT=3002
@@ -173,12 +169,12 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=collection-svc
      - PORT=3025
      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
-      - JWT_SECRET=${JWT_SECRET}
-      - AUTH_SVC_URL=${AUTH_SVC_URL}
+      - AUTH_SVC_URL=http://auth-svc:3050
    ports:
      - "3025:3025"
    depends_on:
@@ -190,13 +186,11 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=file-svc
      - PORT=3026
      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
-      - JWT_SECRET=${JWT_SECRET}
      - FILE_STORAGE_PATH=/data/files
    ports:
      - "3026:3026"
@@ -211,13 +205,12 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=thread-svc
      - PORT=3027
      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - JWT_SECRET=${JWT_SECRET}
-      - AUTH_SVC_URL=${AUTH_SVC_URL}
+      - AUTH_SVC_URL=http://auth-svc:3050
    ports:
      - "3027:3027"
    depends_on:
@@ -229,12 +222,11 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=labs-svc
      - PORT=3031
      - LABS_SVC_PORT=3031
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
    ports:
      - "3031:3031"
    networks:
@@ -244,13 +236,11 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=podcast-svc
      - PORT=3032
      - PODCAST_SVC_PORT=3032
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
-      - ELEVENLABS_API_KEY=${ELEVENLABS_API_KEY}
    ports:
      - "3032:3032"
    volumes:
@@ -262,12 +252,11 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=finance-heatmap-svc
      - PORT=3033
      - REDIS_URL=redis://redis:6379
-      # MOEX, Крипто, Валюты работают без URL (встроенные провайдеры). Для своих рынков — URL сервиса, GET ?market=...&range=...
-      - FINANCE_DATA_PROVIDER_URL=${FINANCE_DATA_PROVIDER_URL:-}
    ports:
      - "3033:3033"
    depends_on:
@@ -279,16 +268,12 @@ services:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=learning-svc
      - PORT=3034
      - LEARNING_SVC_PORT=3034
-      - TIMEWEB_API_BASE_URL=${TIMEWEB_API_BASE_URL}
-      - TIMEWEB_AGENT_ACCESS_ID=${TIMEWEB_AGENT_ACCESS_ID}
-      - TIMEWEB_API_KEY=${TIMEWEB_API_KEY}
-      - DEFAULT_LLM_MODEL=${DEFAULT_LLM_MODEL:-gpt-4o-mini}
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
+      - AUTH_SVC_URL=http://auth-svc:3050
      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
    ports:
      - "3034:3034"
@@ -297,31 +282,37 @@ services:
    networks:
      - gooseek

+  sandbox-svc:
+    build:
+      context: ../..
+      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
+    environment:
+      - SERVICE=sandbox-svc
+      - PORT=3036
+      - SANDBOX_SVC_PORT=3036
+      - AUTH_SVC_URL=http://auth-svc:3050
+      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
+      - OPENSANDBOX_URL=http://opensandbox-server:8080
+    ports:
+      - "3036:3036"
+    depends_on:
+      - postgres
+    networks:
+      - gooseek
+
  travel-svc:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=travel-svc
      - PORT=3035
      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
-      - JWT_SECRET=${JWT_SECRET}
      - AUTH_SVC_URL=http://auth-svc:3050
-      # Российские API (по умолчанию)
      - USE_RUSSIAN_APIS=true
-      - TRAVELPAYOUTS_TOKEN=${TRAVELPAYOUTS_TOKEN}
-      - TRAVELPAYOUTS_MARKER=${TRAVELPAYOUTS_MARKER}
-      - TWOGIS_API_KEY=${TWOGIS_API_KEY}
-      # Международные API (опционально)
-      - AMADEUS_API_KEY=${AMADEUS_API_KEY}
-      - AMADEUS_API_SECRET=${AMADEUS_API_SECRET}
-      - OPENROUTE_API_KEY=${OPENROUTE_API_KEY}
-      # LLM (TimeWeb)
      - LLM_PROVIDER=timeweb
-      - LLM_MODEL=${DEFAULT_LLM_MODEL:-gpt-4o-mini}
-      - TIMEWEB_API_BASE_URL=${TIMEWEB_API_BASE_URL}
-      - TIMEWEB_AGENT_ACCESS_ID=${TIMEWEB_AGENT_ACCESS_ID}
-      - TIMEWEB_API_KEY=${TIMEWEB_API_KEY}
    ports:
      - "3035:3035"
    depends_on:
@@ -330,17 +321,36 @@ services:
    networks:
      - gooseek

+  medicine-svc:
+    build:
+      context: ../..
+      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
+    environment:
+      - SERVICE=medicine-svc
+      - PORT=3037
+      - AUTH_SVC_URL=http://auth-svc:3050
+      - SEARXNG_URL=http://searxng:8080
+      - LLM_PROVIDER=timeweb
+    ports:
+      - "3037:3037"
+    depends_on:
+      - auth-svc
+      - searxng
+    networks:
+      - gooseek
+
  admin-svc:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile.all
+    env_file: ../../../.env
    environment:
      - SERVICE=admin-svc
      - PORT=3040
      - ADMIN_SVC_PORT=3040
      - DATABASE_URL=postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable
-      - JWT_SECRET=${JWT_SECRET}
-      - AUTH_SVC_URL=${AUTH_SVC_URL}
+      - AUTH_SVC_URL=http://auth-svc:3050
      - MINIO_ENDPOINT=minio:9000
      - MINIO_ACCESS_KEY=minioadmin
      - MINIO_SECRET_KEY=minioadmin
@@ -378,12 +388,12 @@ services:
      context: ../../webui
      dockerfile: Dockerfile
      args:
-        - NEXT_PUBLIC_DISABLED_ROUTES=${NEXT_PUBLIC_DISABLED_ROUTES:-/medicine}
+        NEXT_PUBLIC_ENABLED_ROUTES: ${NEXT_PUBLIC_ENABLED_ROUTES:-}
+        NEXT_PUBLIC_TWOGIS_API_KEY: ${NEXT_PUBLIC_TWOGIS_API_KEY:-}
+    env_file: ../../../.env
    environment:
      - NODE_ENV=production
      - API_URL=http://api-gateway:3015
-      - NEXT_PUBLIC_API_URL=
-      - NEXT_PUBLIC_DISABLED_ROUTES=${NEXT_PUBLIC_DISABLED_ROUTES:-/medicine}
    ports:
      - "3000:3000"
    depends_on: