Context
Sub C of Epic #11720 (Cloud Agent OS Deployment Readiness). MVP-critical. Blocked-by D0 #11721 (topology decision); builds on Sub B.
The Problem
There is no production-shaped reference deployment profile in-repo. docker-compose.yml runs only the KB/MC/Chroma baseline — the orchestrator, model provider, and reverse proxy are in no composition. Reverse-proxy refs (ai/mcp/deploy/proxy/{Caddyfile,nginx.conf}) are unwired and carry a port mismatch (proxy KB 3001 / MC 3002 vs compose KB 3000 / MC 3001). Backups are not redeploy-safe.
The Fix
Author the canonical production reference deployment profile under ai/deploy/: a copy-paste-ready docker-compose profile running the D0-decided topology (KB, MC, Chroma, orchestrator-or-ADR-justified-exclusion, model provider, reverse proxy); resolve the proxy↔compose port mismatch; wire the reverse proxy + TLS termination; redeploy-safe persistence — bind-mount .neo-ai-data/backups (+ a declared /data convention) so a container rebuild cannot discard backup artifacts.
Acceptance Criteria
Out of Scope
- The topology decision (D0 #11721) + the topology capability (Sub B).
- Healthcheck / journey proof (Sub D).
Related
Parent #11720 · blocked-by #11721 (D0) · #10803 (external exposure) · #10801 (reference Docker/compose artifacts) · Origin Discussion #11718 §5 Sub C.
Origin Session ID
8e1dc8ca-b5a5-4479-b3cf-31918eb4a5b2
Context
Sub C of Epic #11720 (Cloud Agent OS Deployment Readiness). MVP-critical. Blocked-by D0 #11721 (topology decision); builds on Sub B.
The Problem
There is no production-shaped reference deployment profile in-repo.
docker-compose.ymlruns only the KB/MC/Chroma baseline — the orchestrator, model provider, and reverse proxy are in no composition. Reverse-proxy refs (ai/mcp/deploy/proxy/{Caddyfile,nginx.conf}) are unwired and carry a port mismatch (proxy KB 3001 / MC 3002 vs compose KB 3000 / MC 3001). Backups are not redeploy-safe.The Fix
Author the canonical production reference deployment profile under
ai/deploy/: a copy-paste-readydocker-composeprofile running the D0-decided topology (KB, MC, Chroma, orchestrator-or-ADR-justified-exclusion, model provider, reverse proxy); resolve the proxy↔compose port mismatch; wire the reverse proxy + TLS termination; redeploy-safe persistence — bind-mount.neo-ai-data/backups(+ a declared/dataconvention) so a container rebuild cannot discard backup artifacts.Acceptance Criteria
docker-composereference profile exists, running the full D0-decided topology.Out of Scope
Related
Parent #11720 · blocked-by #11721 (D0) · #10803 (external exposure) · #10801 (reference Docker/compose artifacts) · Origin Discussion #11718 §5 Sub C.
Origin Session ID
8e1dc8ca-b5a5-4479-b3cf-31918eb4a5b2