# mc-proxy on rift — TLS ingress for metacrypt containers.
#
# Uses host networking so mc-proxy can bind directly to host ports
# and reach metacrypt containers on 127.0.0.1:18443/18080/19443.
#
# Usage:
#   docker compose -f deploy/docker/docker-compose-rift.yml up -d
#
# Prerequisites:
#   - /srv/mc-proxy/mc-proxy.toml (copy from deploy/mc-proxy-rift.toml)
#   - /srv/mc-proxy/certs/ with TLS cert for L7 route
#   - metacrypt containers running (127.0.0.1:18443, 18080, 19443)

services:
  mc-proxy:
    build:
      context: ../..
      dockerfile: Dockerfile
      args:
        VERSION: "${VERSION:-dev}"
    network_mode: host
    volumes:
      - /srv/mc-proxy:/srv/mc-proxy
    restart: unless-stopped