name: homelab-registry-mcp
services:
  registry-mcp:
    image: registry.castaldifamily.com/homelab-registry-mcp:latest
    container_name: homelab-registry-mcp
    restart: unless-stopped
    volumes:
      - registry-data:/data
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - proxy-net
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.registry-mcp.rule=Host(`registry-mcp.castaldifamily.com`)"
      - "traefik.http.routers.registry-mcp.entrypoints=websecure"
      - "traefik.http.routers.registry-mcp.tls=true"
      - "traefik.http.routers.registry-mcp.tls.certresolver=cloudflare"
      - "traefik.http.routers.registry-mcp.middlewares=authentik-auth@file"
      - "traefik.http.services.registry-mcp.loadbalancer.server.port=8765"

volumes:
  registry-data:

networks:
  proxy-net:
    external: true