add docker-compose swarm stack (traefik, NFS binds); SPEC/AGENTS docs

docker-compose.yml

@@ -0,0 +1,26 @@
+services:
+  idrs-api:
+    image: git.proit.id/proitlab/idrs-api:latest
+    env_file:
+      - .env
+    volumes:
+      - /mnt/nfs/server5.saltis.id/data/idrs/data:/app/data
+      - /mnt/nfs/server5.saltis.id/data/idrs/static:/app/app/static
+    networks:
+      - traefik-net
+    deploy:
+      placement:
+        constraints:
+          - node.hostname != server2U
+      restart_policy:
+        condition: any
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.idrs-api.rule=Host(`idrs.databisnis.id`)
+        - traefik.http.routers.idrs-api.entrypoints=websecure
+        - traefik.http.routers.idrs-api.tls.certresolver=letsencrypt
+        - traefik.http.services.idrs-api.loadbalancer.server.port=8000
+
+networks:
+  traefik-net:
+    external: true