feat: backend ingest API, Docker Compose, Ubuntu install guide

- FastAPI: POST /api/v1/events, GET /health, JSON Schema validation

- PostgreSQL models, Alembic migration, bootstrap API key

- deploy/docker-compose.yml, .env.example

- docs/install-ubuntu-24.04.md, updated work-plan (agents first)

deploy/.env.example

@@ -0,0 +1,23 @@
+# Скопировать: cp .env.example .env  (или в /etc/security-alert-center/.env)
+
+# PostgreSQL
+POSTGRES_USER=sac
+POSTGRES_PASSWORD=change-me-long-random
+POSTGRES_DB=sac
+
+# API (публичный URL для ссылок в ответах ingest)
+SAC_PUBLIC_URL=https://sac.example.com
+SAC_API_PORT=8000
+
+# JWT (UI — позже)
+JWT_SECRET=change-me-openssl-rand-hex-32
+
+# Первый API key для агентов (заголовок: Authorization: Bearer <ключ>)
+# Сгенерировать: python -c "import secrets; print('sac_'+secrets.token_urlsafe(32))"
+SAC_BOOTSTRAP_API_KEY=sac_replace_with_generated_key
+
+# Admin UI (фаза 1C)
+SAC_ADMIN_USERNAME=admin
+SAC_ADMIN_PASSWORD=
+
+CORS_ORIGINS=*

deploy/README.md

@@ -1,10 +1,10 @@
 # Deploy
 
-**Статус:** не реализован. См. [docs/deployment.md](../docs/deployment.md).
+```bash
+cp .env.example .env
+nano .env
+docker compose up -d --build
+docker compose run --rm migrate
+```
 
-Планируется:
-
-- `docker-compose.yml`
-- `nginx/sacc.conf`
-- `.env.example`
-- `systemd/` unit-файлы (вариант B)
+Полная инструкция для Ubuntu 24.04: [../docs/install-ubuntu-24.04.md](../docs/install-ubuntu-24.04.md)

deploy/docker-compose.yml

@@ -0,0 +1,51 @@
+services:
+  postgres:
+    image: postgres:16-bookworm
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-sac}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB:-sac}
+    volumes:
+      - sac_pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-sac} -d ${POSTGRES_DB:-sac}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  api:
+    build:
+      context: ..
+      dockerfile: backend/Dockerfile
+    restart: unless-stopped
+    env_file:
+      - .env
+    environment:
+      DATABASE_URL: postgresql+psycopg2://${POSTGRES_USER:-sac}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-sac}
+      SAC_PUBLIC_URL: ${SAC_PUBLIC_URL:-http://localhost:8000}
+      JWT_SECRET: ${JWT_SECRET:?set JWT_SECRET}
+      SAC_BOOTSTRAP_API_KEY: ${SAC_BOOTSTRAP_API_KEY:?set SAC_BOOTSTRAP_API_KEY}
+      EVENT_SCHEMA_PATH: /app/schemas/event-schema-v1.json
+      CORS_ORIGINS: ${CORS_ORIGINS:-*}
+    ports:
+      - "${SAC_API_PORT:-8000}:8000"
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+  migrate:
+    build:
+      context: ..
+      dockerfile: backend/Dockerfile
+    env_file:
+      - .env
+    environment:
+      DATABASE_URL: postgresql+psycopg2://${POSTGRES_USER:-sac}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-sac}
+    command: alembic upgrade head
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+volumes:
+  sac_pgdata: