services:
  togomcp-main:
    image: ${MAIN_IMAGE:-localhost/togo-mcp:latest}
    container_name: togomcp-main
    ports:
      - "${MAIN_PORT:-8000}:8000"
    environment:
      NCBI_API_KEY: ${NCBI_API_KEY}
      TZ: ${TZ:-Asia/Tokyo}
      # Extra Host headers to accept (comma-separated). The public vhosts are
      # allowed in code; set this only to add internal names (e.g. the container
      # host) if the reverse proxy forwards a different Host. See .env.example.
      TOGOMCP_ALLOWED_HOSTS: ${TOGOMCP_ALLOWED_HOSTS:-}
      # Peers allowed to set X-Forwarded-Proto/-For. Default covers loopback +
      # the Docker bridge range; set only if the proxy is on another subnet.
      TOGOMCP_FORWARDED_ALLOW_IPS: ${TOGOMCP_FORWARDED_ALLOW_IPS:-}
      TOGOMCP_QUERY_LOG: ${TOGOMCP_QUERY_LOG:-}
      # /stats dashboard HTTP Basic creds — unset = dashboard disabled (503).
      TOGOMCP_STATS_USER: ${TOGOMCP_STATS_USER:-}
      TOGOMCP_STATS_PASSWORD: ${TOGOMCP_STATS_PASSWORD:-}
      # Log privacy knobs (see .env.example). Salt unset = per-process random.
      TOGOMCP_LOG_HASH_SALT: ${TOGOMCP_LOG_HASH_SALT:-}
      TOGOMCP_LOG_QUERY_TEXT: ${TOGOMCP_LOG_QUERY_TEXT:-}
      # Raw client IP in the log (`ip`). Off by default; on = the log is PII.
      TOGOMCP_LOG_RAW_IP: ${TOGOMCP_LOG_RAW_IP:-}
      # Client names to drop from /stats (comma-separated). Opt-in; never inferred.
      TOGOMCP_STATS_EXCLUDE_CLIENTS: ${TOGOMCP_STATS_EXCLUDE_CLIENTS:-}
    volumes:
      - ./logs:/var/log/togomcp
    restart: unless-stopped

  togomcp-test:
    image: ${TEST_IMAGE:-localhost/togo-mcp:dev}
    container_name: togomcp-test
    ports:
      - "${TEST_PORT:-8001}:8000"
    environment:
      NCBI_API_KEY: ${NCBI_API_KEY}
      TZ: ${TZ:-Asia/Tokyo}
      # Extra Host headers to accept (comma-separated). Public vhosts allowed in code.
      TOGOMCP_ALLOWED_HOSTS: ${TOGOMCP_ALLOWED_HOSTS_TEST:-}
      # Peers allowed to set X-Forwarded-Proto/-For (see togomcp-main above).
      TOGOMCP_FORWARDED_ALLOW_IPS: ${TOGOMCP_FORWARDED_ALLOW_IPS_TEST:-}
      TOGOMCP_QUERY_LOG: ${TOGOMCP_QUERY_LOG_TEST:-}
      # /stats dashboard HTTP Basic creds — unset = dashboard disabled (503).
      TOGOMCP_STATS_USER: ${TOGOMCP_STATS_USER_TEST:-}
      TOGOMCP_STATS_PASSWORD: ${TOGOMCP_STATS_PASSWORD_TEST:-}
      # Log privacy knobs (see .env.example). Salt unset = per-process random.
      TOGOMCP_LOG_HASH_SALT: ${TOGOMCP_LOG_HASH_SALT_TEST:-}
      TOGOMCP_LOG_QUERY_TEXT: ${TOGOMCP_LOG_QUERY_TEXT_TEST:-}
      TOGOMCP_LOG_RAW_IP: ${TOGOMCP_LOG_RAW_IP_TEST:-}
      TOGOMCP_STATS_EXCLUDE_CLIENTS: ${TOGOMCP_STATS_EXCLUDE_CLIENTS_TEST:-}
    volumes:
      - ./logs-test:/var/log/togomcp
    restart: unless-stopped