services:
  proxmox-mcp-api:
    build: .
    ports:
      - "8811:8811"
    volumes:
      - ./proxmox-config:/app/proxmox-config:ro
    environment:
      - PROXMOX_MCP_CONFIG=/app/proxmox-config/config.json
      # Set PROXMOX_API_KEY in your shell or .env before starting OpenAPI mode.
      - PROXMOX_API_KEY=${PROXMOX_API_KEY:?Set PROXMOX_API_KEY before starting OpenAPI mode}
      - API_HOST=0.0.0.0
      - API_PORT=8811
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8811/livez"]
      interval: 30s
      timeout: 10s
      retries: 3
    networks:
      - proxmox-network

  proxmox-mcp-http:
    build: .
    profiles:
      - mcp-http
    ports:
      - "8000:8000"
    volumes:
      - ./proxmox-config:/app/proxmox-config:ro
    environment:
      - PROXMOX_MCP_CONFIG=/app/proxmox-config/config.json
      - PROXMOX_MCP_MODE=mcp-http
      - MCP_HOST=0.0.0.0
      - MCP_PORT=8000
      - MCP_TRANSPORT=STREAMABLE_HTTP
      # Optional but strongly recommended for every remotely reachable deployment.
      - MCP_API_KEY=${MCP_API_KEY:-}
      # For reverse proxy deployments, set explicit Host/Origin allowlists.
      # - MCP_DNS_REBINDING_PROTECTION=true
      # - MCP_ALLOWED_HOSTS=mcp.example.com:*,localhost:*
      # - MCP_ALLOWED_ORIGINS=https://mcp.example.com
    restart: unless-stopped
    networks:
      - proxmox-network

networks:
  proxmox-network:
    driver: bridge