feat(db): перевести хранилище с SQLite на PostgreSQL

При старте backend накатывает схему PostgreSQL 18 и, если база пустая, один раз импортирует mikrotik.db с тома. Повторный старт не копирует данные. Бэкап в UI идёт через pg_dump.

Co-authored-by: Cursor <[email protected]>

deploy/docker-compose.traefik.yml

@@ -54,17 +54,64 @@ services:
         max-size: "10m"
         max-file: "3"
 
+  postgres:
+    image: ${POSTGRES_IMAGE_TAG:-postgres:18-alpine}
+    container_name: mmapp-postgres
+    restart: unless-stopped
+    shm_size: "256mb"
+    environment:
+      POSTGRES_USER: mmapp
+      POSTGRES_DB: mmapp
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD in .env}
+      POSTGRES_INITDB_ARGS: "--encoding=UTF8 --locale=C.UTF-8 --data-checksums"
+      TZ: UTC
+      PGTZ: UTC
+    command:
+      - postgres
+      - -c
+      - timezone=UTC
+      - -c
+      - listen_addresses=*
+      - -c
+      - max_connections=100
+      - -c
+      - shared_buffers=256MB
+      - -c
+      - work_mem=16MB
+      - -c
+      - maintenance_work_mem=128MB
+      - -c
+      - wal_compression=on
+    volumes:
+      - mmapp-pgdata:/var/lib/postgresql/data
+    networks:
+      - mmapp
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U mmapp -d mmapp"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
   backend:
     image: git.shx.one/denozord/mikrotikmanager-backend:${MM_BACKEND_IMAGE_TAG:-latest}
     pull_policy: always
     container_name: mmapp-backend
     restart: unless-stopped
     depends_on:
-      - traefik
+      traefik:
+        condition: service_started
+      postgres:
+        condition: service_healthy
     # No host ports — frontend reaches backend on the Compose network.
     environment:
       NODE_ENV: production
       PORT: "8000"
+      DATABASE_URL: postgres://mmapp:${POSTGRES_PASSWORD}@postgres:5432/mmapp
       DATABASE_PATH: /app/data/mikrotik.db
       CORS_ORIGIN: ${CORS_ORIGIN:-https://mm.shnt.top}
       AUTH_REQUIRED: ${AUTH_REQUIRED:-true}
@@ -90,7 +137,7 @@ services:
       interval: 30s
       timeout: 5s
       retries: 3
-      start_period: 15s
+      start_period: 300s
     logging:
       driver: json-file
       options:
@@ -150,7 +197,7 @@ services:
       REGISTRY_USERNAME: ${REGISTRY_USERNAME:-}
       REGISTRY_PASSWORD: ${REGISTRY_PASSWORD:-}
       POLL_INTERVAL_SECONDS: ${POLL_INTERVAL_SECONDS:-300}
-      HEALTH_TIMEOUT_SECONDS: ${HEALTH_TIMEOUT_SECONDS:-120}
+      HEALTH_TIMEOUT_SECONDS: ${HEALTH_TIMEOUT_SECONDS:-600}
       STOP_TIMEOUT_SECONDS: ${STOP_TIMEOUT_SECONDS:-30}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
@@ -167,6 +214,7 @@ services:
 volumes:
   traefik_letsencrypt:
     name: mmapp_traefik_letsencrypt
+  mmapp-pgdata:
 
 networks:
   mmapp: