Deliver Step 1: Backend cleanup — secrets scrubbed, is_admin column, Telegram optional, crypto service, v4-v7 migrations, .env.example, setup.sh

docker-compose.yml

@@ -15,17 +15,9 @@ services:
   backend:
     build: ./backend
     restart: unless-stopped
+    env_file: .env
     environment:
-      - DATABASE_URL=postgresql+asyncpg://fitness@fitness-db:5432/fitness_rewards
-      - SECRET_KEY=8915f64daf616b1b1ea5cdc8242ec924adf263c045bef378d9cb880787ba4386
-      - STRAVA_CLIENT_ID=211907
-      - STRAVA_CLIENT_SECRET=d1e48251327a3760acd6dcf4129ec59350dc6b71
-      - POLAR_CLIENT_ID=13c4d547-4056-4b55-8412-a1cce84e887e
-      - POLAR_CLIENT_SECRET=29890119-2267-4a72-8888-e67ab0c0bf60
-      - GROQ_API_KEY=${GROQ_API_KEY}
-      - TELEGRAM_BOT_TOKEN=${TELEGRAM_BOT_TOKEN}
-      - TELEGRAM_CHAT_ID=${TELEGRAM_CHAT_ID}
-      - BASE_URL=https://fitness.littlefake.com
+      - BASE_URL=${BASE_URL:-http://localhost}
     depends_on:
       fitness-db:
         condition: service_healthy
@@ -36,21 +28,31 @@ services:
       retries: 10
       start_period: 30s
 
+  mcp-connector:
+    build: ./mcp-connector
+    restart: unless-stopped
+    environment:
+      - FITNESS_API_URL=http://backend:8000
+    depends_on:
+      backend:
+        condition: service_healthy
+    ports:
+      - "3001:3001"
+
   fitness-db:
     image: postgres:16-alpine
     restart: unless-stopped
     environment:
-      - POSTGRES_USER=fitness
-      - POSTGRES_DB=fitness_rewards
+      - POSTGRES_USER=${DB_USER:-fitness}
+      - POSTGRES_DB=${DB_NAME:-fitness_rewards}
       - POSTGRES_HOST_AUTH_METHOD=trust
     volumes:
       - fitness_db_data:/var/lib/postgresql/data
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U fitness -d fitness_rewards"]
+      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-fitness}"]
       interval: 5s
       timeout: 5s
       retries: 5
-      start_period: 10s
 
 volumes:
   fitness_db_data: