services:
  cerbero-mcp:
    image: cerbero-mcp:2.0.0
    build: .
    container_name: cerbero-mcp
    env_file: .env
    volumes:
      - ./secrets:/secrets:ro
    restart: unless-stopped
    healthcheck:
      test:
        - "CMD"
        - "python"
        - "-c"
        - "import os, urllib.request; urllib.request.urlopen(f'http://localhost:{os.environ.get(\"PORT\",\"9000\")}/health', timeout=3).close()"
      interval: 30s
      timeout: 5s
      retries: 3
    networks:
      - traefik
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik
      - "traefik.http.routers.cerbero-mcp.rule=Host(`cerbero-mcp.${DOMAIN_NAME:-tielogic.xyz}`)"
      - traefik.http.routers.cerbero-mcp.tls=true
      - traefik.http.routers.cerbero-mcp.entrypoints=websecure
      - traefik.http.routers.cerbero-mcp.tls.certresolver=mytlschallenge
      - "traefik.http.services.cerbero-mcp.loadbalancer.server.port=${PORT:-9000}"
      - "com.centurylinklabs.watchtower.enable=true"

networks:
  traefik:
    external: true