docker-compose.yml

version: '3.8'

services:
  nordic-registry-mcp:
    build: .
    image: nordic-registry-mcp-server:latest
    container_name: nordic-registry-mcp-server
    ports:
      - "8080:8080"
    environment:
      # Optional: Bolagsverket (Sweden) OAuth2 credentials; Norway, Denmark
      # and Finland registries need no auth
      - BOLAGSVERKET_CLIENT_ID=${BOLAGSVERKET_CLIENT_ID:-}
      - BOLAGSVERKET_CLIENT_SECRET=${BOLAGSVERKET_CLIENT_SECRET:-}

      # Optional: Bearer token for HTTP auth
      - MCP_AUTH_TOKEN=${MCP_AUTH_TOKEN:-}

    # Resource limits (adjust as needed)
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 128M
        reservations:
          cpus: '0.1'
          memory: 32M

    # Health check
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 5s

    # Restart policy
    restart: unless-stopped

    # Security
    security_opt:
      - no-new-privileges:true
    read_only: true
    tmpfs:
      - /tmp