fixes

stack.yml

@@ -19,18 +19,16 @@ secrets:
 
 services:
   ai-agent:
-    build:
-      context: ./agent
-    image: burnserv/ai-agent:latest
+    image: hostlabs/ai-agent:latest
     networks: [opsNet]
     ports:
-      - "8080:8080"
+      - "8080:8080"        # expose only if you want host access; remove if internal-only
     deploy:
       mode: replicated
       replicas: 1
       placement:
         constraints:
-          - node.role == manager
+          - node.role == manager    # must be on a manager to control Swarm via docker.sock
       labels:
         - "ai.agent=true"
     volumes:
@@ -39,6 +37,26 @@ services:
       - source: rules.yaml
         target: /app/rules.yaml
 
+  relay:
+    image: hostlabs/ai-relay:latest
+    networks: [opsNet]
+    depends_on: [ai-agent]
+    environment:
+      - OPENAI_MODEL=gpt-4o-mini
+      - AGENT_URL=http://ai-agent:8080           # DNS name on opsNet
+      - OPENAI_API_KEY_FILE=/run/secrets/openai_api_key
+    secrets:
+      - source: openai_api_key
+        target: openai_api_key
+    ports:
+      - "8090:8090"
+    deploy:
+      mode: replicated
+      replicas: 1
+      placement:
+        constraints:
+          - node.role == manager
+
   prometheus:
     image: prom/prometheus:v2.55.0
     networks: [opsNet]
@@ -95,25 +113,3 @@ services:
       - --path.rootfs=/host
     volumes:
       - /:/host:ro,rslave
-
-  relay:
-    build:
-      context: ./relay
-    image: burnserv/ai-relay:latest
-    networks: [opsNet]
-    depends_on: [ai-agent]
-    deploy:
-      mode: replicated
-      replicas: 1
-      placement:
-        constraints:
-          - node.role == manager
-    environment:
-      - OPENAI_MODEL=gpt-4o-mini
-      - AGENT_URL=http://ai-agent:8080
-      - OPENAI_API_KEY_FILE=/run/secrets/openai_api_key
-    secrets:
-      - source: openai_api_key
-        target: openai_api_key
-    ports:
-      - "8090:8090"