# MCP Auth Backend — FastAPI 纯 API 服务（端口 8003）
# 启动：docker compose up -d
# 停止：docker compose down
# 日志：docker compose logs -f
services:
  mcp-auth-backend:
    build:
      context: .
      dockerfile: Dockerfile
    image: mcp-auth-backend:latest
    container_name: mcp-auth-backend
    network_mode: host
    environment:
      - AUTH_DB_HOST=${AUTH_DB_HOST:-10.100.154.100}
      - AUTH_DB_PORT=${AUTH_DB_PORT:-5432}
      - AUTH_DB_USER=${AUTH_DB_USER:-postgres}
      - AUTH_DB_PASSWORD=${AUTH_DB_PASSWORD:-digiwin}
      - AUTH_DB_NAME=${AUTH_DB_NAME:-mcp_auth}
      # 鼎捷云 IAM 鉴权配置
      - IAM_BASE_URL=${IAM_BASE_URL:-https://iam.digiwincloud.com.cn}
      - IAM_APP_TOKEN=${IAM_APP_TOKEN:-eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpZCI6ImRhdGEtYnVzaW5lc3MtZGVtbyIsInNpZCI6MH0.Spo64LstbWxjYNefVFAbEbgfjzZoQGNcqKSGuYUOCRk}
      - IAM_CACHE_TTL=${IAM_CACHE_TTL:-30}
      # Redis 缓存配置
      - REDIS_HOST=${REDIS_HOST:-10.100.154.100}
      - REDIS_PORT=${REDIS_PORT:-6379}
      - REDIS_DB=${REDIS_DB:-0}
      - REDIS_PASSWORD=${REDIS_PASSWORD:-digiwin}
      # 外层反向代理路径前缀（/mcp-auth-api/docs 文档正常渲染所需）
      - ROOT_PATH=${ROOT_PATH:-/mcp-auth-api}
    restart: unless-stopped