docker-compose.yml

* side-effects: use `pip`, `docker`, and `docker-compose` roles on
  which `docker_service` depends
* load env vars from file instead of in memory (makes restarts
  possible from box w/o ansible)
* tweak port forwarding to block mysql port outside host