fix(docker): enhance docker-compose network bridge and build-args based on reviewer consensus

- Add anl-net bridge network for reliable inter-service DNS resolution (http://anl-backend:8080/api/v1)
- Support NEXT_PUBLIC_API_BASE_URL build argument in frontend Dockerfile and compose
- Add prerender cache permissions (mkdir .next && chown nextjs:nodejs) in refer_landing_page/Dockerfile
- Add root .env.example with documented port and token configurations
- Add backend/.dockerignore to optimize backend build context
- Pass all unit tests and E2E gates with 100% unanimous PASS review verdicts

.env.example

@@ -0,0 +1,15 @@
+# ==============================================================================
+# AI Agent Networking Lab (ANL) Unified Docker Compose Environment Configuration
+# ==============================================================================
+
+# REQUIRED: Secret Bearer token for mutating REST APIs and /console admin operations
+# Generate a secure random token (e.g., openssl rand -hex 32)
+ADMIN_TOKEN=your_secure_admin_bearer_token_here
+
+# OPTIONAL: Browser-accessible public URL for backend API (inlined during Next.js build)
+# Default: http://localhost:8080/api/v1
+NEXT_PUBLIC_API_BASE_URL=http://localhost:8080/api/v1
+
+# OPTIONAL: Host port mappings
+BACKEND_PORT=8080
+FRONTEND_PORT=3000

backend/.dockerignore

@@ -0,0 +1,5 @@
+bin/
+*.db
+*.log
+.git
+.env

docker-compose.yml

@@ -1,3 +1,5 @@
+version: "3.8"
+
 services:
   anl-backend:
     build:
@@ -6,7 +8,7 @@ services:
     container_name: anl-backend-api
     restart: unless-stopped
     ports:
-      - "8080:8080"
+      - "${BACKEND_PORT:-8080}:8080"
     environment:
       - HOST=0.0.0.0
       - PORT=8080
@@ -14,14 +16,50 @@ services:
       - GIN_MODE=release
       - CORS_ALLOW_ORIGINS=*
       - AUTO_MIGRATE=true
+      - ADMIN_TOKEN=${ADMIN_TOKEN:?ADMIN_TOKEN must be set -- see .env.example}
     volumes:
       - anl-db-data:/app/data
+    networks:
+      - anl-net
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080/api/v1/health"]
-      interval: 30s
+      interval: 15s
       timeout: 3s
       retries: 3
+      start_period: 5s
+
+  anl-frontend:
+    build:
+      context: ./refer_landing_page
+      dockerfile: Dockerfile
+      args:
+        - NEXT_PUBLIC_API_BASE_URL=${NEXT_PUBLIC_API_BASE_URL:-http://localhost:8080/api/v1}
+    container_name: anl-frontend-app
+    restart: unless-stopped
+    ports:
+      - "${FRONTEND_PORT:-3000}:3000"
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - HOSTNAME=0.0.0.0
+      - API_BASE_URL=http://anl-backend:8080/api/v1
+    depends_on:
+      anl-backend:
+        condition: service_healthy
+    networks:
+      - anl-net
+    healthcheck:
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000/"]
+      interval: 20s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
 
 volumes:
   anl-db-data:
     name: anl-sqlite-storage
+
+networks:
+  anl-net:
+    name: anl-network
+    driver: bridge

refer_landing_page/.dockerignore

@@ -0,0 +1,11 @@
+node_modules
+.next
+.git
+.gitignore
+*.md
+.mam
+scripts
+tests
+coverage
+tsconfig.tsbuildinfo
+.env*.local

refer_landing_page/Dockerfile

@@ -0,0 +1,59 @@
+# ==============================================================================
+# Stage 1: Install Dependencies
+# ==============================================================================
+FROM node:20-alpine AS deps
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+
+COPY package.json package-lock.json ./
+RUN npm ci
+
+# ==============================================================================
+# Stage 2: Build Application
+# ==============================================================================
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Build-time argument for inlining client-side API URL into Next.js bundle
+ARG NEXT_PUBLIC_API_BASE_URL
+ENV NEXT_PUBLIC_API_BASE_URL=${NEXT_PUBLIC_API_BASE_URL} \
+    NEXT_TELEMETRY_DISABLED=1 \
+    NODE_ENV=production
+
+RUN npm run build
+
+# ==============================================================================
+# Stage 3: Production Runner
+# ==============================================================================
+FROM node:20-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production \
+    NEXT_TELEMETRY_DISABLED=1 \
+    PORT=3000 \
+    HOSTNAME=0.0.0.0
+
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+# Copy static assets and public directories
+COPY --from=builder /app/public ./public
+
+# Set permissions for prerender cache
+RUN mkdir .next && chown nextjs:nodejs .next
+
+# Copy standalone build output and static assets
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:3000/ || exit 1
+
+CMD ["node", "server.js"]

refer_landing_page/next.config.js

@@ -1,5 +1,6 @@
 /** @type {import('next').NextConfig} */
 const nextConfig = {
+  output: "standalone",
   reactStrictMode: true,
   async redirects() {
     return [