690517:1607 204 and 302 refactor #05

specs/04-Infrastructure-OPS/04-00-docker-compose/QNAP/app/.env.example

@@ -68,7 +68,7 @@ HOSTNAME=0.0.0.0
 BACKEND_IMAGE_TAG=latest
 FRONTEND_IMAGE_TAG=latest
 
-# ClamAV
+# ClamAV (service in app stack)
 CLAMAV_HOST=localhost
 CLAMAV_PORT=3310
 
@@ -76,8 +76,9 @@ CLAMAV_PORT=3310
 # ADR-022 RAG — Retrieval-Augmented Generation
 # ========================================
 
-# Qdrant vector store (local docker-compose or QNAP)
-QDRANT_URL=http://localhost:6333
+# Qdrant vector store (service in service stack)
+QDRANT_HOST=qdrant
+QDRANT_PORT=6333
 
 # Ollama (Admin Desktop Desk-5439 — ADR-018 AI boundary)
 OLLAMA_EMBED_MODEL=nomic-embed-text
@@ -96,3 +97,13 @@ RAG_TOPK=20
 RAG_FINAL_K=5
 RAG_TIMEOUT_MS=5000
 RAG_QUERY_CACHE_TTL=300
+
+# BullMQ Queues
+BULLMQ_QUEUE_PREFIX=rfa
+BULLMQ_REMINDER_QUEUE=rfa-reminders
+BULLMQ_DISTRIBUTION_QUEUE=rfa-distribution
+
+# Reminder Schedule
+REMINDER_DAYS_BEFORE_DUE=2
+ESCALATION_DAYS_AFTER_DUE_L1=1
+ESCALATION_DAYS_AFTER_DUE_L2=3

specs/04-Infrastructure-OPS/04-00-docker-compose/QNAP/app/docker-compose-app.yml

@@ -89,8 +89,11 @@ services:
       JWT_EXPIRATION: '8h'
       JWT_REFRESH_SECRET: ${JWT_REFRESH_SECRET:?JWT_REFRESH_SECRET required}
       # --- ClamAV (ADR-016 file upload scan) ---
-      CLAMAV_HOST: 'clamav'
+      CLAMAV_HOST: 'localhost'
       CLAMAV_PORT: '3310'
+      # --- Qdrant (Vector Database for RAG — ADR-023A) ---
+      QDRANT_HOST: 'qdrant'
+      QDRANT_PORT: '6333'
       # --- Numbering ---
       NUMBERING_LOCK_TIMEOUT: '5000'
       NUMBERING_RESERVATION_TTL: '300'
@@ -119,7 +122,43 @@ services:
         condition: service_healthy
 
   # ----------------------------------------------------------------
-  # 2. Frontend Web App (Next.js)
+  # 3. ClamAV (Antivirus scanning for file uploads — ADR-016)
+  # Service Name: clamav (Backend อ้างอิง CLAMAV_HOST=clamav, port 3310)
+  # ----------------------------------------------------------------
+  clamav:
+    <<: [*restart_policy, *default_logging]
+    image: clamav/clamav:1.4.4
+    container_name: clamav
+    deploy:
+      resources:
+        limits:
+          cpus: '1.0'
+          memory: 2G
+        reservations:
+          cpus: '0.25'
+          memory: 1G
+    environment:
+      CLAMAV_NO_LOG_FILE: 'true'      # ปิดการเขียนไฟล์ clamd.log
+      FRESHCLAM_NO_LOG_FILE: 'true'   # ปิดการเขียนไฟล์ freshclam.log
+      TZ: 'Asia/Bangkok'
+      CLAMAV_NO_FRESHCLAMD: 'false'
+      CLAMAV_NO_CLAMD: 'false'
+      CLAMD_STARTUP_TIMEOUT: '1800'
+    networks:
+      - lcbp3
+    volumes:
+      # cache definitions เพื่อไม่ต้อง download ทุกครั้งที่ restart
+      - '/share/np-dms/services/clamav/data:/var/lib/clamav'
+      - '/share/np-dms/data/logs/clamav:/var/log/clamav'
+    healthcheck:
+      test: ['CMD', 'clamdcheck.sh']
+      interval: 60s
+      timeout: 30s
+      retries: 3
+      start_period: 300s
+
+  # ----------------------------------------------------------------
+  # 4. Frontend Web App (Next.js)
   # Service Name: frontend (ตามที่ NPM อ้างอิง → frontend:3000)
   # ----------------------------------------------------------------
   frontend: