refactor(deploy): consolidate configuration and reorganize docker files

docker/Dockerfile.agent

@@ -0,0 +1,28 @@
+FROM oven/bun:1 AS builder
+
+WORKDIR /build
+
+COPY agent/package.json agent/bun.lock* ./
+
+RUN bun install
+
+COPY agent/ ./
+
+RUN bun run build --external jsdom
+
+FROM oven/bun:1-alpine
+
+WORKDIR /app
+
+RUN apk add --no-cache ca-certificates wget
+
+COPY --from=builder /build/dist /app/dist
+COPY --from=builder /build/node_modules /app/node_modules
+COPY --from=builder /build/package.json /app/package.json
+
+EXPOSE 8081
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD wget --no-verbose --tries=1 --spider http://localhost:8081/health || exit 1
+
+CMD ["bun", "run", "dist/index.js"]

docker/Dockerfile.mcp

@@ -0,0 +1,18 @@
+FROM golang:1.25-alpine AS build
+
+WORKDIR /src
+COPY go.mod go.sum ./
+RUN go mod download
+
+COPY . .
+ARG TARGETARCH
+ARG COMMIT_HASH=unknown
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH:-amd64} \
+    go build -trimpath -ldflags "-s -w -X github.com/memohai/memoh/internal/version.CommitHash=${COMMIT_HASH}" -o /out/mcp ./cmd/mcp
+
+FROM alpine:latest
+RUN apk add --no-cache grep
+WORKDIR /app
+COPY --from=build /out/mcp /opt/mcp
+COPY cmd/mcp/template /opt/mcp-template
+ENTRYPOINT ["/bin/sh","-lc","bootstrap(){ [ -e /app/mcp ] || { mkdir -p /app; [ -f /opt/mcp ] && cp -a /opt/mcp /app/mcp 2>/dev/null || true; }; }; bootstrap; if [ -x /app/mcp ]; then exec /app/mcp \"$@\"; fi; exec /opt/mcp \"$@\"","--"]

docker/Dockerfile.server

@@ -0,0 +1,31 @@
+FROM golang:1.25-alpine AS builder
+
+WORKDIR /build
+
+RUN apk add --no-cache git make
+
+COPY go.mod go.sum ./
+RUN go mod download
+
+COPY . .
+
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
+    go build -trimpath -ldflags "-s -w" \
+    -o memoh-server ./cmd/agent/main.go
+
+FROM alpine:latest
+
+WORKDIR /app
+
+RUN apk add --no-cache ca-certificates tzdata wget
+
+COPY --from=builder /build/memoh-server /app/memoh-server
+
+RUN mkdir -p /var/lib/memoh/data
+
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD wget --no-verbose --tries=1 --spider http://localhost:8080/health || exit 1
+
+CMD ["/app/memoh-server"]

docker/Dockerfile.web

@@ -0,0 +1,33 @@
+FROM node:25-alpine AS builder
+
+WORKDIR /build
+
+RUN npm install -g pnpm@10
+
+COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
+
+COPY packages ./packages
+
+RUN pnpm install
+
+ARG VITE_API_URL=http://localhost:8080
+ARG VITE_AGENT_URL=http://localhost:8081
+
+ENV VITE_API_URL=$VITE_API_URL
+ENV VITE_AGENT_URL=$VITE_AGENT_URL
+
+WORKDIR /build/packages/web
+RUN pnpm build
+
+FROM nginx:alpine
+
+COPY --from=builder /build/packages/web/dist /usr/share/nginx/html
+
+COPY docker/config/nginx.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD wget --no-verbose --tries=1 --spider http://localhost/ || exit 1
+
+CMD ["nginx", "-g", "daemon off;"]

docker/config/config.docker.toml

@@ -0,0 +1,54 @@
+## Service configuration
+[log]
+level = "info"
+format = "text"
+
+[server]
+addr = ":8080"
+
+## Admin
+[admin]
+username = "admin"
+password = "admin123"
+email = "admin@memoh.local"
+
+## Auth configuration
+[auth]
+jwt_secret = "YZq8kXrW5dFpNt9mLxQvHbRjKsMnOePw"
+jwt_expires_in = "168h"
+
+## Docker configuration
+[containerd]
+socket_path = "unix:///var/run/docker.sock"
+namespace = "default"
+
+[mcp]
+busybox_image = "memoh-mcp:latest"
+snapshotter = "overlayfs"
+data_root = "/var/lib/memoh/data"
+data_mount = "/data"
+
+## Postgres configuration
+[postgres]
+host = "postgres"
+port = 5432
+user = "memoh"
+password = "memoh123"
+database = "memoh"
+sslmode = "disable"
+
+## Qdrant configuration
+[qdrant]
+base_url = "http://qdrant:6334"
+api_key = ""
+collection = "memory"
+timeout_seconds = 10
+
+## Agent Gateway
+[agent_gateway]
+host = "agent"
+port = 8081
+
+[brave]
+api_key = ""
+base_url = "https://api.search.brave.com/res/v1/"

docker/config/nginx.conf

@@ -0,0 +1,64 @@
+server {
+    listen 80;
+    server_name _;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Gzip 压缩
+    gzip on;
+    gzip_vary on;
+    gzip_min_length 1024;
+    gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml+rss application/json application/javascript;
+
+    # 前端路由
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    # API 代理
+    location /api/ {
+        proxy_pass http://memoh-server:8080/;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        
+        # 超时设置
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+
+    # Agent Gateway 代理
+    location /agent/ {
+        proxy_pass http://memoh-agent:8081/;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        
+        # 超时设置
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+
+    # 静态资源缓存
+    location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # 安全头
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+}