feat: реализовать EvoFirewall V1 control plane

API, UI, Linux/MikroTik agents, IP lists, политики, stats, CI и интеграция с auth-portal/EvoBGP.

Co-authored-by: Cursor <[email protected]>

Dockerfile

@@ -0,0 +1,53 @@
+# syntax=docker/dockerfile:1
+
+ARG NODE_VERSION=22.23.0-bookworm-slim
+
+FROM node:${NODE_VERSION} AS build
+WORKDIR /app
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends python3 make g++ \
+  && rm -rf /var/lib/apt/lists/* \
+  && corepack enable
+
+COPY package.json pnpm-workspace.yaml pnpm-lock.yaml turbo.json ./
+COPY apps/web/package.json apps/web/
+COPY apps/api/package.json apps/api/
+COPY packages/ui/package.json packages/ui/
+COPY packages/shared/package.json packages/shared/
+COPY packages/db/package.json packages/db/
+RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
+    pnpm install --frozen-lockfile
+
+COPY apps/web apps/web
+COPY apps/api apps/api
+COPY packages/ui packages/ui
+COPY packages/shared packages/shared
+COPY packages/db packages/db
+
+RUN pnpm turbo build --filter=@evofw/web --filter=@evofw/api \
+  && pnpm --filter @evofw/api deploy --prod /out \
+  && cp -r apps/web/dist /out/static \
+  && mkdir -p /out/dist/agent-scripts \
+  && cp -r apps/api/src/agent-scripts/* /out/dist/agent-scripts/ \
+  && rm -rf /out/src /out/test /out/.turbo \
+  && rm -rf /out/node_modules/@evofw/db/src /out/node_modules/@evofw/db/.turbo \
+  && rm -rf /out/node_modules/@evofw/shared/src /out/node_modules/@evofw/shared/.turbo
+
+FROM node:${NODE_VERSION}
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends ca-certificates \
+  && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+ENV NODE_ENV=production \
+    STATIC_DIR=/app/static \
+    DATABASE_URL=sqlite:/data/app.db \
+    SERVER_PORT=8080
+
+COPY --from=build /out ./
+
+EXPOSE 8080
+VOLUME ["/data"]
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD ["node", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
+CMD ["node", "dist/server.js"]