docker-compose.yml

version: '3.8'

services:
  fortigate-mcp-server:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: fortigate-mcp-server
    restart: unless-stopped
    ports:
      # Loopback-only publish: the shipped config defaults to
      # auth.require_auth=false, and SECURITY.md forbids exposing the
      # unauthenticated server beyond 127.0.0.1. Widen this mapping only
      # after enabling auth.require_auth=true in config/config.json.
      - "127.0.0.1:8814:8814"
    volumes:
      # Mount configuration file (required)
      - ./config/config.json:/app/config/config.json:ro
      
      # Mount logs directory
      - ./logs:/app/logs
    environment:
      - FORTIGATE_MCP_CONFIG=/app/config/config.json
    networks:
      - fortigate-mcp-network
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

networks:
  fortigate-mcp-network:
    driver: bridge
    name: fortigate-mcp-network

volumes:
  fortigate-logs:
    driver: local