services:
  keycloak:
    image: quay.io/keycloak/keycloak:24.0
    container_name: mcp-keycloak
    environment:
      KEYCLOAK_ADMIN: admin
      KEYCLOAK_ADMIN_PASSWORD: admin
      KC_HEALTH_ENABLED: "true"
    volumes:
      - ./keycloak/mcp-realm.json:/opt/keycloak/data/import/mcp-realm.json:ro
    command:
      - start-dev
      - --import-realm
      - --http-port=8180
    ports:
      - "8180:8180"
    healthcheck:
      test: ["CMD-SHELL", "exec 3<>/dev/tcp/127.0.0.1/8180;echo -e 'GET /health/ready HTTP/1.1\r\nhost: localhost\r\nConnection: close\r\n\r\n' >&3;if [ $? -eq 0 ]; then echo 'Healthcheck Successful';exit 0;else echo 'Healthcheck Failed';exit 1;fi;"]
      interval: 10s
      timeout: 5s
      retries: 15
      start_period: 30s
    networks:
      - mcp-network

  php:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: mcp-php
    volumes:
      - ../../../:/app
    working_dir: /app
    environment:
      KEYCLOAK_EXTERNAL_URL: http://localhost:8180
      KEYCLOAK_INTERNAL_URL: http://keycloak:8180
      KEYCLOAK_REALM: mcp
      MCP_AUDIENCE: mcp-server
    depends_on:
      keycloak:
        condition: service_healthy
    command: >
      sh -c "mkdir -p /app/examples/server/oauth-keycloak/sessions;
      chmod -R 0777 /app/examples/server/oauth-keycloak/sessions;
      touch /app/examples/server/oauth-keycloak/dev.log;
      chmod 0666 /app/examples/server/oauth-keycloak/dev.log;
      touch /app/examples/server/dev.log;
      chmod 0666 /app/examples/server/dev.log;
      composer install --no-interaction --quiet 2>/dev/null || true;
      php-fpm"
    networks:
      - mcp-network

  nginx:
    image: nginx:alpine
    container_name: mcp-nginx
    ports:
      - "8000:80"
    volumes:
      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
      - ../../../:/app:ro
    depends_on:
      - php
    networks:
      - mcp-network

networks:
  mcp-network:
    driver: bridge