services:
  proxmox-mcp:
    image: gitea.ext.ben.io/b3nw/proxmox-mcp-custom:latest
    container_name: proxmox-mcp
    environment:
      # --- Proxmox API Credentials ---
      # Base URL of your Proxmox VE instance (host:port, no https://)
      - PROXMOX_URL=pve.local.ben.io:8006
      
      # Proxmox API User - full "user@realm" format
      # Example: root@pam, admin@pve, proxmox-mcp@pam
      - PROXMOX_USER=proxmox-mcp@pam
      
      # Proxmox API Token ID - JUST the token name, NOT the full ID
      # If your full token is "proxmox-mcp@pam!mytoken", use only "mytoken"
      - PROXMOX_TOKEN_ID=token
      
      # Proxmox API Token Secret (the UUID-like value)
      - PROXMOX_PASSWORD=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
      
      # SSL verification - 'false' for self-signed certs in homelab
      - PROXMOX_VERIFY_SSL=false
      
      # --- MCP Transport Security ---
      # Allowed Host headers (comma-separated, supports :* for wildcard ports)
      - MCP_ALLOWED_HOSTS=proxmox-mcp.ext.ben.io,localhost:*,127.0.0.1:*
    ports:
      - "8000:8000"
    restart: unless-stopped