feat(V2): docker-compose.yml minimo (1 servizio, env_file .env)

docker-compose.yml

@@ -1,180 +1,18 @@
-networks:
-  internal:
-    driver: bridge
-
-volumes:
-  caddy-data:
-  caddy-config:
-
-secrets:
-  deribit_credentials:
-    file: ./secrets/deribit.json
-  hyperliquid_wallet:
-    file: ./secrets/hyperliquid.json
-  bybit_credentials:
-    file: ./secrets/bybit.json
-  alpaca_credentials:
-    file: ./secrets/alpaca.json
-  macro_credentials:
-    file: ./secrets/macro.json
-  sentiment_credentials:
-    file: ./secrets/sentiment.json
-  core_token:
-    file: ./secrets/core.token
-  observer_token:
-    file: ./secrets/observer.token
-
-x-common-security: &common-security
-  cap_drop: [ALL]
-  security_opt:
-    - no-new-privileges:true
-  restart: unless-stopped
-  networks: [internal]
-
 services:
-  # ========================================================
-  # GATEWAY — unica porta host, reverse proxy + landing page
-  # ========================================================
-  gateway:
-    build:
-      context: ./gateway
-      dockerfile: Dockerfile
-    image: cerbero-gateway:dev
-    restart: unless-stopped
-    networks: [internal]
-    security_opt:
-      - no-new-privileges:true
+  cerbero-mcp:
+    image: cerbero-mcp:2.0.0
+    build: .
+    container_name: cerbero-mcp
     ports:
-      - "${GATEWAY_HTTP_PORT:-80}:80"
-      - "${GATEWAY_HTTPS_PORT:-443}:443"
-    environment:
-      ACME_EMAIL: ${ACME_EMAIL:-adrianodalpastro@tielogic.com}
-      WRITE_ALLOWLIST: ${WRITE_ALLOWLIST:-127.0.0.1/32 ::1/128 172.16.0.0/12}
-    volumes:
-      - ./gateway/Caddyfile:/etc/caddy/Caddyfile:ro
-      - ./gateway/public:/srv:ro
-      - caddy-data:/data
-      - caddy-config:/config
-    depends_on:
-      mcp-deribit:     { condition: service_healthy }
-      mcp-hyperliquid: { condition: service_healthy }
-      mcp-bybit:       { condition: service_healthy }
-      mcp-alpaca:      { condition: service_healthy }
-      mcp-macro:       { condition: service_healthy }
-      mcp-sentiment:   { condition: service_healthy }
+      - "${PORT:-9000}:${PORT:-9000}"
+    env_file: .env
+    restart: unless-stopped
     healthcheck:
-      test: ["CMD", "wget", "-q", "--spider", "http://localhost/"]
+      test:
+        - "CMD"
+        - "python"
+        - "-c"
+        - "import os, urllib.request; urllib.request.urlopen(f'http://localhost:{os.environ.get(\"PORT\",\"9000\")}/health', timeout=3).close()"
       interval: 30s
       timeout: 5s
       retries: 3
-
-  # ========================================================
-  # MCP — accessibili solo via gateway (nessuna porta host)
-  # ========================================================
-  mcp-deribit:
-    image: cerbero-mcp-deribit:dev
-    build:
-      context: .
-      dockerfile: docker/mcp-deribit.Dockerfile
-    <<: *common-security
-    user: "1000:1000"
-    read_only: true
-    tmpfs:
-      - /tmp:rw,size=64M,mode=1777
-    secrets: [deribit_credentials, core_token, observer_token]
-    environment:
-      CREDENTIALS_FILE: /run/secrets/deribit_credentials
-      CORE_TOKEN_FILE: /run/secrets/core_token
-      OBSERVER_TOKEN_FILE: /run/secrets/observer_token
-      DERIBIT_TESTNET: "true"   # override secrets/deribit.json testnet flag
-      ROOT_PATH: /mcp-deribit
-
-  mcp-hyperliquid:
-    image: cerbero-mcp-hyperliquid:dev
-    build:
-      context: .
-      dockerfile: docker/mcp-hyperliquid.Dockerfile
-    <<: *common-security
-    user: "1000:1000"
-    read_only: true
-    tmpfs:
-      - /tmp:rw,size=64M,mode=1777
-    secrets: [hyperliquid_wallet, core_token, observer_token]
-    environment:
-      HYPERLIQUID_WALLET_FILE: /run/secrets/hyperliquid_wallet
-      CORE_TOKEN_FILE: /run/secrets/core_token
-      OBSERVER_TOKEN_FILE: /run/secrets/observer_token
-      HYPERLIQUID_TESTNET: "true"   # override secrets/hyperliquid.json testnet flag
-      ROOT_PATH: /mcp-hyperliquid
-
-  mcp-bybit:
-    image: cerbero-mcp-bybit:dev
-    build:
-      context: .
-      dockerfile: docker/mcp-bybit.Dockerfile
-    <<: *common-security
-    user: "1000:1000"
-    read_only: true
-    tmpfs:
-      - /tmp:rw,size=64M,mode=1777
-    secrets: [bybit_credentials, core_token, observer_token]
-    environment:
-      BYBIT_CREDENTIALS_FILE: /run/secrets/bybit_credentials
-      CORE_TOKEN_FILE: /run/secrets/core_token
-      OBSERVER_TOKEN_FILE: /run/secrets/observer_token
-      BYBIT_TESTNET: "true"   # override secrets/bybit.json testnet flag
-      ROOT_PATH: /mcp-bybit
-      PORT: "9019"
-
-  mcp-alpaca:
-    image: cerbero-mcp-alpaca:dev
-    build:
-      context: .
-      dockerfile: docker/mcp-alpaca.Dockerfile
-    <<: *common-security
-    user: "1000:1000"
-    read_only: true
-    tmpfs:
-      - /tmp:rw,size=64M,mode=1777
-    secrets: [alpaca_credentials, core_token, observer_token]
-    environment:
-      ALPACA_CREDENTIALS_FILE: /run/secrets/alpaca_credentials
-      CORE_TOKEN_FILE: /run/secrets/core_token
-      OBSERVER_TOKEN_FILE: /run/secrets/observer_token
-      ALPACA_PAPER: "true"
-      ROOT_PATH: /mcp-alpaca
-      PORT: "9020"
-
-  mcp-macro:
-    image: cerbero-mcp-macro:dev
-    build:
-      context: .
-      dockerfile: docker/mcp-macro.Dockerfile
-    <<: *common-security
-    user: "1000:1000"
-    read_only: true
-    tmpfs:
-      - /tmp:rw,size=64M,mode=1777
-    secrets: [macro_credentials, core_token, observer_token]
-    environment:
-      MACRO_CREDENTIALS_FILE: /run/secrets/macro_credentials
-      CORE_TOKEN_FILE: /run/secrets/core_token
-      OBSERVER_TOKEN_FILE: /run/secrets/observer_token
-      ROOT_PATH: /mcp-macro
-
-  mcp-sentiment:
-    image: cerbero-mcp-sentiment:dev
-    build:
-      context: .
-      dockerfile: docker/mcp-sentiment.Dockerfile
-    <<: *common-security
-    user: "1000:1000"
-    read_only: true
-    tmpfs:
-      - /tmp:rw,size=64M,mode=1777
-    secrets: [sentiment_credentials, core_token, observer_token]
-    environment:
-      SENTIMENT_CREDENTIALS_FILE: /run/secrets/sentiment_credentials
-      CORE_TOKEN_FILE: /run/secrets/core_token
-      OBSERVER_TOKEN_FILE: /run/secrets/observer_token
-      ROOT_PATH: /mcp-sentiment