Реализована интеграция с СМС провайдером

codebase/backend/infra/compose/application.yml

@@ -1,3 +1,11 @@
+x-no-sms-secrets: &no-sms-secrets
+  SMS_DATABASE_URL: ""
+  SMS_SERVICE_TOKEN: ""
+  KEYCLOAK_SMS_SERVICE_TOKEN: ""
+  IDGTL_SMS_API_KEY: ""
+  IDGTL_SMS_CALLBACK_USERNAME: ""
+  IDGTL_SMS_CALLBACK_PASSWORD: ""
+
 x-api-runtime: &api-runtime
   build:
     context: ../../api-backend
@@ -5,6 +13,7 @@ x-api-runtime: &api-runtime
   env_file:
     - path: ../../.env
       required: false
+  environment: *no-sms-secrets
   volumes:
     - type: bind
       source: ${PG_CA_HOST_PATH}
@@ -16,6 +25,29 @@ x-api-runtime: &api-runtime
     driver: json-file
     options: {max-size: "50m", max-file: "5"}
 
+x-sms-runtime: &sms-runtime
+  build:
+    context: ../../sms-service
+  image: ${SMS_SERVICE_IMAGE:-han-chat-sms-service:local}
+  environment:
+    SMS_DATABASE_URL: ${SMS_DATABASE_URL}
+    SMS_SERVICE_TOKEN: ${SMS_SERVICE_TOKEN}
+    IDGTL_SMS_BASE_URL: ${IDGTL_SMS_BASE_URL:-https://direct.i-dgtl.ru}
+    IDGTL_SMS_CALLBACK_PUBLIC_URL: ${IDGTL_SMS_CALLBACK_PUBLIC_URL}
+    IDGTL_SMS_CALLBACK_USERNAME: ${IDGTL_SMS_CALLBACK_USERNAME}
+    IDGTL_SMS_CALLBACK_PASSWORD: ${IDGTL_SMS_CALLBACK_PASSWORD}
+    LOG_LEVEL: ${LOG_LEVEL:-INFO}
+    OTEL_EXPORTER_OTLP_ENDPOINT: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://otel-collector:4317}
+  volumes:
+    - type: bind
+      source: ${PG_CA_HOST_PATH}
+      target: /run/secrets/pg-ca.pem
+      read_only: true
+  security_opt: ["no-new-privileges:true"]
+  logging:
+    driver: json-file
+    options: {max-size: "50m", max-file: "5"}
+
 services:
   frontend-static:
     build:
@@ -45,6 +77,7 @@ services:
       - path: ../../.env
         required: false
     environment:
+      <<: *no-sms-secrets
       KC_DB: postgres
       KC_DB_URL: ${KEYCLOAK_DB_URL}
       KC_DB_SCHEMA: ${KEYCLOAK_DB_SCHEMA:-keycloak}
@@ -59,12 +92,13 @@ services:
       KC_BOOTSTRAP_ADMIN_USERNAME: ${KEYCLOAK_ADMIN}
       KC_BOOTSTRAP_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
       KEYCLOAK_OTP_MOCK_ENABLED: ${KEYCLOAK_OTP_MOCK_ENABLED:-false}
-      KEYCLOAK_OTP_MOCK_CODE: ${KEYCLOAK_OTP_MOCK_CODE:?KEYCLOAK_OTP_MOCK_CODE is required}
+      KEYCLOAK_OTP_MOCK_CODE: ${KEYCLOAK_OTP_MOCK_CODE:-}
       KEYCLOAK_OTP_HMAC_KEY: ${KEYCLOAK_OTP_HMAC_KEY:?KEYCLOAK_OTP_HMAC_KEY is required}
-      KEYCLOAK_OTP_TTL_SEC: ${KEYCLOAK_OTP_TTL_SEC:-300}
       KEYCLOAK_OTP_SETTINGS_MAX_STALE_SEC: ${KEYCLOAK_OTP_SETTINGS_MAX_STALE_SEC:-300}
       KEYCLOAK_SETTINGS_BRIDGE_URL: ${KEYCLOAK_SETTINGS_BRIDGE_URL:-http://api-backend:8000/internal/settings/v1/otp}
       KEYCLOAK_SETTINGS_BRIDGE_TOKEN: ${KEYCLOAK_SETTINGS_BRIDGE_TOKEN:?KEYCLOAK_SETTINGS_BRIDGE_TOKEN is required}
+      KEYCLOAK_SMS_SERVICE_URL: ${KEYCLOAK_SMS_SERVICE_URL:-http://sms-service:8080}
+      KEYCLOAK_SMS_SERVICE_TOKEN: ${KEYCLOAK_SMS_SERVICE_TOKEN:?KEYCLOAK_SMS_SERVICE_TOKEN is required}
     command: ["start", "--optimized", "--import-realm"]
     expose: ["8080", "9000"]
     volumes:
@@ -85,6 +119,43 @@ services:
       driver: json-file
       options: {max-size: "50m", max-file: "5"}
 
+  sms-service:
+    <<: *sms-runtime
+    expose: ["8080"]
+    networks: [backend, observability, egress]
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/health/ready', timeout=3)"]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 30s
+    restart: unless-stopped
+
+  sms-worker:
+    <<: *sms-runtime
+    entrypoint: []
+    command: ["han-sms-worker"]
+    environment:
+      SMS_DATABASE_URL: ${SMS_DATABASE_URL}
+      SMS_SERVICE_TOKEN: ${SMS_SERVICE_TOKEN}
+      IDGTL_SMS_BASE_URL: ${IDGTL_SMS_BASE_URL:-https://direct.i-dgtl.ru}
+      IDGTL_SMS_API_KEY: ${IDGTL_SMS_API_KEY:?IDGTL_SMS_API_KEY is required}
+      IDGTL_SMS_CALLBACK_PUBLIC_URL: ${IDGTL_SMS_CALLBACK_PUBLIC_URL}
+      IDGTL_SMS_CALLBACK_USERNAME: ${IDGTL_SMS_CALLBACK_USERNAME}
+      IDGTL_SMS_CALLBACK_PASSWORD: ${IDGTL_SMS_CALLBACK_PASSWORD}
+      LOG_LEVEL: ${LOG_LEVEL:-INFO}
+      OTEL_EXPORTER_OTLP_ENDPOINT: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://otel-collector:4317}
+    networks: [backend, observability, egress]
+    depends_on:
+      sms-service: {condition: service_healthy}
+    healthcheck:
+      test: ["CMD", "python", "-c", "from pathlib import Path; assert b'han-sms-worker' in Path('/proc/1/cmdline').read_bytes()"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+    restart: unless-stopped
+
   message-safety:
     build:
       context: ../../message-safety
@@ -92,6 +163,8 @@ services:
     env_file:
       - path: ../../.env
         required: false
+    environment:
+      <<: *no-sms-secrets
     expose: ["8080"]
     volumes:
       - type: bind
@@ -179,6 +252,8 @@ services:
     env_file:
       - path: ../../.env
         required: false
+    environment:
+      <<: *no-sms-secrets
     expose: ["8080"]
     volumes:
       - type: bind
@@ -207,6 +282,8 @@ services:
     env_file:
       - path: ../../.env
         required: false
+    environment:
+      <<: *no-sms-secrets
     expose: ["8080"]
     volumes:
       - type: bind