feat(nginx): route portfolio API through shared proxy-network

Two containers can't both bind :80/:443, so the portfolio API's own
nginx/certbot stack is being retired. This nginx now joins the
external proxy-network and routes mcp.victorlisbronzo.me to the
portfolio's api container, reusing the existing PORTFOLIO_DOMAIN
envsubst variable that was already wired in but unused.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: victor-lis-bronzo

docker-compose.yml

@@ -104,6 +104,7 @@ services:
       - "host.docker.internal:host-gateway"
     networks:
       - local-network
+      - proxy-network
     depends_on:
       - n8n
       - evolution
@@ -126,3 +127,5 @@ volumes:
 networks:
   local-network:
     driver: bridge
+  proxy-network:
+    external: true

nginx/domains.env.example

@@ -1,5 +1,6 @@
 N8N_DOMAIN=seuservidor.com
 EVO_DOMAIN=seuservidor.com
 PORTAINER_DOMAIN=seuservidor.com
+PORTFOLIO_DOMAIN=seuservidor.com
 
 CERT_DOMAIN=yoursever.com

nginx/nginx.conf.template

@@ -119,5 +119,43 @@ http {
         }
     }
 
+    ### Portfolio API (MCP) Nginx Configuration ###
+
+    server {
+        listen 80;
+        server_name ${PORTFOLIO_DOMAIN};
+
+        location /.well-known/acme-challenge/ {
+            root /var/www/certbot;
+        }
+
+        location / {
+            return 301 https://$host$request_uri;
+        }
+    }
+
+    server {
+        listen 443 ssl;
+        server_name ${PORTFOLIO_DOMAIN};
+
+        ssl_certificate /etc/letsencrypt/live/${PORTFOLIO_DOMAIN}/fullchain.pem;
+        ssl_certificate_key /etc/letsencrypt/live/${PORTFOLIO_DOMAIN}/privkey.pem;
+
+        location / {
+            proxy_pass http://api:3001;
+            proxy_http_version 1.1;
+            proxy_set_header Connection '';
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_buffering off;
+            proxy_cache off;
+            chunked_transfer_encoding off;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+        }
+    }
 
 }