feat: add xavia-ota & rustfs & update INFRA.md

monitoring/docker-compose.yml

@@ -145,17 +145,53 @@ services:
         hostname: rustfs
         container_name: rustfs
         restart: unless-stopped
-        ports:
-            - 9000:9000
-            - 9001:9001
         volumes:
             - /mnt/data:/data
         environment:
-            - RUSTFS_ACCESS_KEY=rustfsadmin
-            - RUSTFS_SECRET_KEY=rustfsadmin
+            - RUSTFS_ACCESS_KEY=${RUSTFS_ACCESS_KEY:-rustfsadmin}
+            - RUSTFS_SECRET_KEY=${RUSTFS_SECRET_KEY:-rustfsadmin}
             - RUSTFS_SERVER_DOMAINS=rustfs.uber-stup.club
             - RUSTFS_CONSOLE_ENABLE=true
             - RUSTFS_ADDRESS=:9000
+            - RUSTFS_CONSOLE_ADDRESS=:9001
+        networks:
+            - monitoring_net
+
+    # ─── Xavia OTA — PostgreSQL ───────────────────────────────
+    xavia_db:
+        image: postgres:16-alpine
+        container_name: xavia_db
+        restart: unless-stopped
+        environment:
+            - POSTGRES_USER=${XAVIA_POSTGRES_USER:-xavia}
+            - POSTGRES_PASSWORD=${XAVIA_POSTGRES_PASSWORD}
+            - POSTGRES_DB=${XAVIA_POSTGRES_DB:-releases_db}
+        volumes:
+            - xavia_db_data:/var/lib/postgresql/data
+        networks:
+            - monitoring_net
+
+    # ─── Xavia OTA ────────────────────────────────────────────
+    xavia:
+        image: xaviaio/xavia-ota:latest
+        container_name: xavia
+        restart: unless-stopped
+        environment:
+            - HOST=https://ota.uber-stup.club
+            - BLOB_STORAGE_TYPE=local
+            - DB_TYPE=postgres
+            - ADMIN_PASSWORD=${XAVIA_ADMIN_PASSWORD}
+            - UPLOAD_KEY=${XAVIA_UPLOAD_KEY}
+            - PRIVATE_KEY_BASE_64=${XAVIA_PRIVATE_KEY_BASE_64}
+            - POSTGRES_USER=${XAVIA_POSTGRES_USER:-xavia}
+            - POSTGRES_PASSWORD=${XAVIA_POSTGRES_PASSWORD}
+            - POSTGRES_DB=${XAVIA_POSTGRES_DB:-releases_db}
+            - POSTGRES_HOST=xavia_db
+            - POSTGRES_PORT=5432
+        volumes:
+            - xavia_blobs:/app/blobs
+        depends_on:
+            - xavia_db
         networks:
             - monitoring_net
 networks:
@@ -163,6 +199,9 @@ networks:
         driver: bridge
 
 volumes:
+    # Xavia
+    xavia_db_data:
+    xavia_blobs:
     # Wazuh
     wazuh_api_configuration:
     wazuh_etc: