services:
  overleaf-mcp:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: overleaf-mcp
    restart: unless-stopped
    networks:
      - qumo_services_proxy_network
    environment:
      - OVERLEAF_EMAIL=${OVERLEAF_EMAIL}
      - OVERLEAF_PASSWORD=${OVERLEAF_PASSWORD}
      - PDF_DOWNLOAD_DIR=/data/resumes
      - LATEX_OUTPUT_DIR=/data/output
      - DEFAULT_TEMPLATE=software-engineer
    volumes:
      - browser-data:/root/.overleaf-mcp/browser-data
      - pdf-output:/data/resumes
      - latex-output:/data/output
      - certs:/root/.local/share/mcp-auth-proxy
    shm_size: "2gb"
    security_opt:
      - seccomp=unconfined
    command:
      - --external-url
      - https://${MCP_DOMAIN}
      - --tls-accept-tos
      - --oidc-issuer
      - ${AUTHENTIK_ISSUER_URL}
      - --oidc-client-id
      - ${AUTHENTIK_CLIENT_ID}
      - --oidc-client-secret
      - ${AUTHENTIK_CLIENT_SECRET}
      - --allowed-user
      - ${ALLOWED_USER}
      - --
      - node
      - /app/dist/index.js

volumes:
  browser-data:
  pdf-output:
  latex-output:
  certs:

networks:
  qumo_services_proxy_network:
    external: true