docker compose fix

docker-compose.yml

@@ -5,8 +5,7 @@ services:
       dockerfile: Dockerfile
     container_name: overleaf-mcp
     restart: unless-stopped
-    networks:
-      - qumo_services_proxy_network
+    # No ports — Caddy reaches this via qumo_services_proxy_network
     environment:
       - OVERLEAF_EMAIL=${OVERLEAF_EMAIL}
       - OVERLEAF_PASSWORD=${OVERLEAF_PASSWORD}
@@ -17,32 +16,38 @@ services:
       - browser-data:/root/.overleaf-mcp/browser-data
       - pdf-output:/data/resumes
       - latex-output:/data/output
-      - certs:/root/.local/share/mcp-auth-proxy
+      - auth-data:/app/data
     shm_size: "2gb"
     security_opt:
       - seccomp=unconfined
     command:
       - --external-url
       - https://${MCP_DOMAIN}
-      - --tls-accept-tos
-      - --oidc-issuer
-      - ${AUTHENTIK_ISSUER_URL}
+      - --listen
+      - ":8080"
+      - --no-auto-tls
+      - --oidc-configuration-url
+      - ${AUTHENTIK_OIDC_CONFIG_URL}
       - --oidc-client-id
       - ${AUTHENTIK_CLIENT_ID}
       - --oidc-client-secret
       - ${AUTHENTIK_CLIENT_SECRET}
-      - --allowed-user
+      - --oidc-allowed-users
       - ${ALLOWED_USER}
+      - --oidc-provider-name
+      - Authentik
       - --
       - node
       - /app/dist/index.js
+    networks:
+      - qumo_services_proxy_network
+
+networks:
+  qumo_services_proxy_network:
+    external: true
 
 volumes:
   browser-data:
   pdf-output:
   latex-output:
-  certs:
-
-networks:
-  qumo_services_proxy_network:
-    external: true
+  auth-data: