Реализованы сервисы ВМ2 - проверка сообщений и синхронизация с Б24 (деплой еще без перевода в боевой режим)

codebase/backend/infra/compose/application.yml

@@ -40,7 +40,9 @@ x-api-runtime: &api-runtime
     KEYCLOAK_INTERNAL_URL: ${KEYCLOAK_INTERNAL_URL:-http://keycloak:8080/auth}
     KEYCLOAK_REALM: ${KEYCLOAK_REALM:-han-chat}
     KEYCLOAK_AUDIENCE: ${KEYCLOAK_AUDIENCE:-han-chat-api}
-    MESSAGE_SAFETY_URL: ${MESSAGE_SAFETY_URL:-http://message-safety:8080}
+    MESSAGE_SAFETY_URL: ${MESSAGE_SAFETY_URL}
+    MESSAGE_SAFETY_API_PREFIX: /internal/safety/v2
+    MESSAGE_SAFETY_CA_FILE: /run/config/message-safety-internal-ca.pem
     MESSAGE_SAFETY_POST_TIMEOUT_SEC: ${MESSAGE_SAFETY_POST_TIMEOUT_SEC:-5}
     MESSAGE_SAFETY_TASK_POLL_INTERVAL_SEC: ${MESSAGE_SAFETY_TASK_POLL_INTERVAL_SEC:-2}
     MESSAGE_SAFETY_TASK_POLL_MAX_SEC: ${MESSAGE_SAFETY_TASK_POLL_MAX_SEC:-300}
@@ -59,6 +61,10 @@ x-api-runtime: &api-runtime
       source: ${PG_CA_HOST_PATH}
       target: /run/secrets/pg-ca.pem
       read_only: true
+    - type: bind
+      source: ${MESSAGE_SAFETY_CA_HOST_PATH}
+      target: /run/config/message-safety-internal-ca.pem
+      read_only: true
   networks: [backend, observability, egress]
   security_opt: ["no-new-privileges:true"]
   ulimits: