docker compose fix

.env.example

@@ -2,7 +2,7 @@
 OVERLEAF_EMAIL=your@email.com
 OVERLEAF_PASSWORD=your-overleaf-password
 MCP_DOMAIN=overleaf-mcp.qumo.io
-AUTHENTIK_ISSUER_URL=https://auth.qumo.io/application/o/overleaf-mcp/
+AUTHENTIK_OIDC_CONFIG_URL=https://auth.qumo.io/application/o/overleaf-mcp/
 AUTHENTIK_CLIENT_ID=<from step 1>
 AUTHENTIK_CLIENT_SECRET=<from step 1>
 ALLOWED_USER=you@qumo.io

docker-compose.yml

@@ -5,8 +5,7 @@ services:
       dockerfile: Dockerfile
     container_name: overleaf-mcp
     restart: unless-stopped
-    networks:
+    # No ports — Caddy reaches this via qumo_services_proxy_network
-      - qumo_services_proxy_network
     environment:
       - OVERLEAF_EMAIL=${OVERLEAF_EMAIL}
       - OVERLEAF_PASSWORD=${OVERLEAF_PASSWORD}
@@ -17,32 +16,38 @@ services:
       - browser-data:/root/.overleaf-mcp/browser-data
       - pdf-output:/data/resumes
       - latex-output:/data/output
-      - certs:/root/.local/share/mcp-auth-proxy
+      - auth-data:/app/data
     shm_size: "2gb"
     security_opt:
       - seccomp=unconfined
     command:
       - --external-url
       - https://${MCP_DOMAIN}
-      - --tls-accept-tos
+      - --listen
-      - --oidc-issuer
+      - ":8080"
-      - ${AUTHENTIK_ISSUER_URL}
+      - --no-auto-tls
+      - --oidc-configuration-url
+      - ${AUTHENTIK_OIDC_CONFIG_URL}
       - --oidc-client-id
       - ${AUTHENTIK_CLIENT_ID}
       - --oidc-client-secret
       - ${AUTHENTIK_CLIENT_SECRET}
-      - --allowed-user
+      - --oidc-allowed-users
       - ${ALLOWED_USER}
+      - --oidc-provider-name
+      - Authentik
       - --
       - node
       - /app/dist/index.js
+    networks:
+      - qumo_services_proxy_network
+
+networks:
+  qumo_services_proxy_network:
+    external: true
 
 volumes:
   browser-data:
   pdf-output:
   latex-output:
-  certs:
+  auth-data:
-
-networks:
-  qumo_services_proxy_network:
-    external: true