# Infrastructure

## Serveurs

| Env | Machine | Prix | Specs |
|-----|---------|------|-------|
| DEV | Dedibox Start-2-L | 24,99 €/mois | Xeon D-1531, 32 GB, 300 Mbps |
| PROD | Pro-11-M-128G (prevu) | 149,99 €/mois | EPYC 4345P, 128 GB, 3 Gbps |

## Domaines

| Domaine | Usage | Hebergement |
|---------|-------|-------------|
| `app.ceoinsight.dev` | Dashboard SaaS | Vercel |
| `mcp.ceoinsight.dev` | MCP Gateway (Streamable HTTP) | Dedibox (Docker) |
| `ceoinsight.dev` | Site marketing (futur) | — |

Tous les domaines sont derriere **Cloudflare** (proxy, DNS, cache). L'IP du serveur n'est pas exposee.

## Architecture deploiement

| Composant | Hebergement | Techno |
|-----------|-------------|--------|
| Dashboard + Auth + Stripe | Vercel | Next.js |
| MCP Gateway | Dedibox (Docker) | Node.js HTTP + `@modelcontextprotocol/sdk` |
| Database | Neon | PostgreSQL (partagee) |

## MCP Gateway — Dedibox

- **Container** : `ceoinsight-gateway` (Docker Compose)
- **Port interne** : 3200
- **Reverse proxy** : Traefik (labels Docker, reseau `proxy`)
- **TLS** : Cloudflare Origin Certificate (gere par Traefik)
- **Donnees** : `/data/ceoinsight/creds` (env file)
- **Sessions** : en memoire (stateless restart OK, les clients re-initialize)

### Infra repo

```
~/infra-169/
  traefik/          # Reverse proxy central (port 80/443)
  firecrawl/        # Firecrawl self-hosted
  n8n/              # n8n workflows
  plane/            # Plane project management
  checkmate/        # Checkmate monitoring
  ceoinsight/       # MCP Gateway (clone du repo AllInMcp)
  Makefile          # make ceoinsight-up/down/deploy
```

### Commandes serveur

```bash
ssh egrfkmjgnbmqfcbbce@163.172.71.169

# Gestion
make ceoinsight-up          # Demarrer le gateway
make ceoinsight-down        # Arreter
make ceoinsight-deploy      # git pull + rebuild + restart
make logs-ceoinsight        # Logs en temps reel
make status                 # Status de tous les containers
```

## Optimisations

- Cache MCP : LRU 10K entries, 500MB, TTL configurable par connecteur
- Cache GSC : 24h (donnees GSC mises a jour quotidiennement)
- Compression : gzip/brotli (Cloudflare)

## Stack de deploy

- Docker Compose sur Dedibox
- Reverse proxy : **Traefik** (TLS via Cloudflare Origin Cert)
- Donnees persistantes : partition `/data` (201 GB)
- Backups DB : gere par Neon