feat(db): перевести хранилище с SQLite на PostgreSQL

При старте backend накатывает схему PostgreSQL 18 и, если база пустая, один раз импортирует mikrotik.db с тома. Повторный старт не копирует данные. Бэкап в UI идёт через pg_dump.

Co-authored-by: Cursor <[email protected]>

deploy/run-beside-cdn-traefik.sh

@@ -80,6 +80,36 @@ fi
 echo "==> Ensure internal network mmapp"
 docker network inspect mmapp >/dev/null 2>&1 || docker network create mmapp >/dev/null
 
+: "${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}"
+
+echo "==> Ensure mmapp-postgres"
+if ! docker inspect mmapp-postgres >/dev/null 2>&1; then
+  docker volume inspect mmapp-pgdata >/dev/null 2>&1 || docker volume create mmapp-pgdata >/dev/null
+  docker run -d \
+    --name mmapp-postgres \
+    --restart unless-stopped \
+    --network mmapp \
+    --network-alias postgres \
+    --shm-size 256mb \
+    -e POSTGRES_USER=mmapp \
+    -e POSTGRES_DB=mmapp \
+    -e POSTGRES_PASSWORD="${POSTGRES_PASSWORD}" \
+    -e POSTGRES_INITDB_ARGS="--encoding=UTF8 --locale=C.UTF-8 --data-checksums" \
+    -e TZ=UTC \
+    -e PGTZ=UTC \
+    -v mmapp-pgdata:/var/lib/postgresql/data \
+    --health-cmd="pg_isready -U mmapp -d mmapp" \
+    --health-interval=5s \
+    --health-timeout=5s \
+    --health-retries=10 \
+    postgres:18-alpine \
+    postgres -c timezone=UTC -c listen_addresses=* -c max_connections=100 \
+      -c shared_buffers=256MB -c work_mem=16MB -c maintenance_work_mem=128MB -c wal_compression=on
+fi
+until docker exec mmapp-postgres pg_isready -U mmapp -d mmapp >/dev/null 2>&1; do
+  sleep 1
+done
+
 if [[ -n "${REGISTRY_USERNAME:-}" && -n "${REGISTRY_PASSWORD:-}" ]]; then
   echo "==> docker login ${REGISTRY}"
   echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY}" -u "${REGISTRY_USERNAME}" --password-stdin
@@ -107,6 +137,7 @@ docker run -d \
   --network-alias backend \
   -e NODE_ENV=production \
   -e PORT=8000 \
+  -e DATABASE_URL="postgres://mmapp:${POSTGRES_PASSWORD}@mmapp-postgres:5432/mmapp" \
   -e DATABASE_PATH=/app/data/mikrotik.db \
   -e "CORS_ORIGIN=${CORS_ORIGIN}" \
   -e "AUTH_REQUIRED=${AUTH_REQUIRED:-true}" \
@@ -121,7 +152,7 @@ docker run -d \
   --health-interval=30s \
   --health-timeout=5s \
   --health-retries=3 \
-  --health-start-period=15s \
+  --health-start-period=300s \
   --log-driver json-file \
   --log-opt max-size=10m \
   --log-opt max-file=3 \