docs(usage): accès depuis Windows (WSL2/VM) via localhost ou IP; routes Nginx

docker-compose.yml

@@ -292,6 +292,83 @@ services:
         ipv4_address: 172.20.0.40
     restart: unless-stopped
 
+  # Profil monitoring: Loki + Promtail + Grafana
+  loki:
+    image: grafana/loki:2.9.0
+    container_name: 4nk-loki
+    ports:
+      - "3100:3100"
+    command: -config.file=/etc/loki/local-config.yaml
+    volumes:
+      - ./log/loki-config.yaml:/etc/loki/local-config.yaml:ro
+      - loki_data:/loki
+    networks:
+      4nk_network:
+        ipv4_address: 172.20.0.41
+    restart: unless-stopped
+
+  promtail:
+    image: grafana/promtail:2.9.0
+    container_name: 4nk-promtail
+    command: -config.file=/etc/promtail/config.yml
+    volumes:
+      - ./log/promtail-config.yml:/etc/promtail/config.yml:ro
+      - /var/lib/docker/containers:/var/lib/docker/containers:ro
+      - /var/log/docker:/var/log/docker:ro
+      - ./modules:/workspace/modules:ro
+      - ./projects:/workspace/projects:ro
+      - ./log:/workspace/logs:ro
+    networks:
+      4nk_network:
+        ipv4_address: 172.20.0.42
+    restart: unless-stopped
+    depends_on:
+      - loki
+
+  grafana:
+    image: grafana/grafana:10.0.0
+    container_name: 4nk-grafana
+    ports:
+      - "3000:3000"
+    environment:
+      - GF_SECURITY_ADMIN_PASSWORD=admin
+      - GF_USERS_ALLOW_SIGN_UP=false
+      - GF_SERVER_ROOT_URL=%(protocol)s://%(domain)s/grafana
+      - GF_SERVER_SERVE_FROM_SUB_PATH=true
+    volumes:
+      - grafana_data:/var/lib/grafana
+      - ./log/grafana-datasources.yml:/etc/grafana/provisioning/datasources/datasources.yml:ro
+      - ./log/grafana-dashboards.yml:/etc/grafana/provisioning/dashboards/dashboards.yml:ro
+      - ./log/dashboards:/etc/grafana/provisioning/dashboards/dashboards:ro
+    networks:
+      4nk_network:
+        ipv4_address: 172.20.0.43
+    restart: unless-stopped
+    depends_on:
+      - loki
+
+  # Profil outils de développement et diagnostic
+  devtools:
+    image: alpine:3.19
+    container_name: 4nk-devtools
+    command: ["sh", "-c", "sleep infinity"]
+    tty: true
+    stdin_open: true
+    volumes:
+      - ./log:/workspace/logs
+      - ./modules:/workspace/modules:ro
+      - ./projects:/workspace/projects:ro
+    networks:
+      4nk_network:
+        ipv4_address: 172.20.0.44
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "sh", "-lc", "apk info >/dev/null 2>&1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+
+
 volumes:
   miniback_pg_data:
 

docs/USAGE.md

@@ -38,3 +38,9 @@
 - Les tags `:dev` sont en cours de création; en cas d’indisponibilité, utiliser des tags stables temporaires
 - Conf Tor: `modules/tor/conf/tor.conf` est montée si l'image Tor supporte `/etc/tor/torrc`
 - Le reverse proxy Nginx s’appuie sur les hostnames Docker (`*.4nk.local`); en cas de changement d’IP/hostnames, mettre à jour `docker-compose.yml` et relancer `nginx`.
+
+## Accès depuis Windows (WSL2 ou VM Linux)
+
+- WSL2 (Docker dans WSL): accéder via le navigateur Windows à `http://localhost/`. Si non accessible, utiliser l’IP WSL (`wsl hostname -I` côté PowerShell) et ouvrir `http://<IP_WSL>/`.
+- VM Linux (Hyper‑V/VirtualBox/VMware): utiliser l’IP de la VM (`ip addr` dans la VM) et ouvrir `http://<IP_VM>/`.
+- Les routes exposées par Nginx: `/`, `/blindbit/`, `/sdk_storage/`, `/relay1/`, `/relay2/`, `/relay3/`, `/signer/`, `/coffre/`, `/grafana/`.