Реализация на отдельных двух машинах с протестированным взаимодействием по проверке сообщений

VM1_app/codebase/backend/observability/docker-compose.yml

@@ -1,18 +1,22 @@
 services:
   otel-queue-init:
-    image: alpine:3.21.2
+    image: ${OTEL_QUEUE_INIT_IMAGE:?OTEL_QUEUE_INIT_IMAGE must be pinned by digest}
     command: ["sh", "-c", "chown 10001:10001 /queue && chmod 0700 /queue"]
     volumes:
       - otel-queue:/queue
     networks: [observability]
     restart: "no"
     read_only: true
+    tmpfs: ["/tmp:size=8m,mode=1777"]
     cap_drop: ["ALL"]
     cap_add: ["CHOWN", "FOWNER"]
     security_opt: ["no-new-privileges:true"]
+    pids_limit: 32
+    mem_limit: 32m
+    cpus: 0.25
 
   otel-collector:
-    image: otel/opentelemetry-collector-contrib:0.117.0
+    image: ${OTEL_COLLECTOR_IMAGE:?OTEL_COLLECTOR_IMAGE must be pinned by digest}
     command: ["--config=/etc/otelcol/config.yaml"]
     environment:
       APP_ENV: ${APP_ENV:-production-like}
@@ -41,6 +45,7 @@ services:
     security_opt: ["no-new-privileges:true"]
     ulimits:
       core: {soft: 0, hard: 0}
+    pids_limit: 128
     mem_limit: 512m
     cpus: 0.5
     logging:
@@ -48,7 +53,7 @@ services:
       options: {max-size: "50m", max-file: "5"}
 
   otel-collector-local:
-    image: otel/opentelemetry-collector-contrib:0.117.0
+    image: ${OTEL_COLLECTOR_IMAGE:?OTEL_COLLECTOR_IMAGE must be pinned by digest}
     profiles: ["observability-local"]
     command: ["--config=/etc/otelcol/config.yaml"]
     expose: ["4317", "4318", "13133"]