feat: harden gateway with policy engine, secure tools, and governance docs

docker-compose.yml

@@ -1,90 +1,72 @@
-# AegisGitea MCP - Docker Compose Configuration
-# Usage: docker-compose up -d
 services:
-    aegis-mcp:
-        build:
-            context: .
-            dockerfile: docker/Dockerfile
-        container_name: aegis-gitea-mcp
-        restart: unless-stopped
+  aegis-mcp:
+    profiles: ["prod"]
+    build:
+      context: .
+      dockerfile: docker/Dockerfile
+    container_name: aegis-gitea-mcp
+    restart: unless-stopped
+    env_file:
+      - .env
+    environment:
+      ENVIRONMENT: production
+      MCP_HOST: ${MCP_HOST:-127.0.0.1}
+      ALLOW_INSECURE_BIND: ${ALLOW_INSECURE_BIND:-false}
+    expose:
+      - "8080"
+    volumes:
+      - aegis-mcp-logs:/var/log/aegis-mcp
+      - ./policy.yaml:/app/policy.yaml:ro
+    read_only: true
+    tmpfs:
+      - /tmp
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    user: "1000:1000"
+    networks:
+      - aegis-network
+    healthcheck:
+      test: ["CMD", "python", "-c", "import httpx; httpx.get('http://127.0.0.1:8080/health', timeout=5)"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
 
-        env_file:
-            - .env
-
-        # ports:
-        #     - "${MCP_PORT:-8080}:8080"
-
-        volumes:
-            - aegis-mcp-logs:/var/log/aegis-mcp
-
-        networks:
-            - aegis-network
-            - proxy # Connect to Traefik network (if using Traefik)
-
-        security_opt:
-            - no-new-privileges:true
-
-        deploy:
-            resources:
-                limits:
-                    cpus: "1.0"
-                    memory: 512M
-                reservations:
-                    cpus: "0.25"
-                    memory: 128M
-
-        healthcheck:
-            test:
-                [
-                    "CMD",
-                    "python",
-                    "-c",
-                    "import httpx; httpx.get('http://localhost:8080/health')",
-                ]
-            interval: 30s
-            timeout: 10s
-            retries: 3
-            start_period: 10s
-
-        # Traefik labels for automatic HTTPS and routing
-        # labels:
-        #   - "traefik.enable=true"
-
-        #   # Router configuration
-        #   - "traefik.http.routers.aegis-mcp.rule=Host(`${MCP_DOMAIN:-mcp.example.com}`)"
-        #   - "traefik.http.routers.aegis-mcp.entrypoints=websecure"
-        #   - "traefik.http.routers.aegis-mcp.tls=true"
-        #   - "traefik.http.routers.aegis-mcp.tls.certresolver=letsencrypt"
-
-        #   # Service configuration
-        #   - "traefik.http.services.aegis-mcp.loadbalancer.server.port=8080"
-
-        #   # Rate limiting middleware (60 req/min per IP)
-        #   - "traefik.http.middlewares.aegis-ratelimit.ratelimit.average=60"
-        #   - "traefik.http.middlewares.aegis-ratelimit.ratelimit.period=1m"
-        #   - "traefik.http.middlewares.aegis-ratelimit.ratelimit.burst=10"
-
-        #   # Security headers middleware
-        #   - "traefik.http.middlewares.aegis-security.headers.sslredirect=true"
-        #   - "traefik.http.middlewares.aegis-security.headers.stsSeconds=31536000"
-        #   - "traefik.http.middlewares.aegis-security.headers.stsIncludeSubdomains=true"
-        #   - "traefik.http.middlewares.aegis-security.headers.stsPreload=true"
-        #   - "traefik.http.middlewares.aegis-security.headers.contentTypeNosniff=true"
-        #   - "traefik.http.middlewares.aegis-security.headers.browserXssFilter=true"
-        #   - "traefik.http.middlewares.aegis-security.headers.forceSTSHeader=true"
-
-        #   # Apply middlewares to router
-        #   - "traefik.http.routers.aegis-mcp.middlewares=aegis-ratelimit@docker,aegis-security@docker"
+  aegis-mcp-dev:
+    profiles: ["dev"]
+    build:
+      context: .
+      dockerfile: docker/Dockerfile
+    container_name: aegis-gitea-mcp-dev
+    restart: unless-stopped
+    env_file:
+      - .env
+    environment:
+      ENVIRONMENT: development
+      MCP_HOST: 127.0.0.1
+      ALLOW_INSECURE_BIND: false
+      LOG_LEVEL: DEBUG
+      EXPOSE_ERROR_DETAILS: true
+    ports:
+      - "127.0.0.1:${MCP_PORT:-8080}:8080"
+    volumes:
+      - ./src:/app/src:ro
+      - ./policy.yaml:/app/policy.yaml:ro
+      - aegis-mcp-logs:/var/log/aegis-mcp
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    user: "1000:1000"
+    networks:
+      - aegis-network
 
 volumes:
-    aegis-mcp-logs:
-        driver: local
+  aegis-mcp-logs:
+    driver: local
 
 networks:
-    aegis-network:
-        driver: bridge
-
-    # External Traefik network (create with: docker network create traefik)
-    # Comment out if not using Traefik
-    proxy:
-        external: true
+  aegis-network:
+    driver: bridge