broccolini-bot: bind internal API to 0.0.0.0 for bridge access; mount .env for config persistence

broccolini-discord.js

@@ -329,8 +329,8 @@ internalApp.use('/internal', internalApi);
 let httpServer = null;
 let internalServer = null;
 if (CONFIG.INTERNAL_API_SECRET) {
-  internalServer = internalApp.listen(CONFIG.INTERNAL_API_PORT, '127.0.0.1', () => {
-    console.log(`[internalApi] listening on 127.0.0.1:${CONFIG.INTERNAL_API_PORT}`);
+  internalServer = internalApp.listen(CONFIG.INTERNAL_API_PORT, '0.0.0.0', () => {
+    console.log(`[internalApi] listening on 0.0.0.0:${CONFIG.INTERNAL_API_PORT}`);
   });
 } else {
   console.warn('[internalApi] INTERNAL_API_SECRET not set — internal API disabled.');

docker-compose.yml

@@ -5,6 +5,10 @@ services:
     container_name: broccolini
     restart: unless-stopped
     env_file: .env
+    environment:
+      - ENV_FILE=/app/.env
+    volumes:
+      - ./.env:/app/.env:rw
     ports:
       - "100.114.205.53:8892:5000"
     healthcheck:
@@ -15,7 +19,6 @@ services:
       start_period: 15s
     networks:
       - broccoli-net
-
 networks:
   broccoli-net:
     name: broccoli-net