services:
  opnsense-mcp:
    build:
      context: .
      args:
        OPNSENSE_MCP_VERSION: ${OPNSENSE_MCP_VERSION:-0.8.2}
        SUPERGATEWAY_VERSION: ${SUPERGATEWAY_VERSION:-3.4.3}
    container_name: opnsense-mcp
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "${MCP_HTTP_PORT:-8811}:8000"
    volumes:
      - type: bind
        source: ${HOST_SSH_KEY_PATH}
        target: /run/secrets/opnsense_ssh_key
        read_only: true
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:8000/healthz"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s