MCP-Server self-hosted.
Multi-Tenant. Field-Whitelist. Audit-Spur.

# docker-compose.yaml (Auszug, generalisiert)
services:
  mcp-server:
    image: registry.kunde.de/mcp-server:${VERSION}
    networks: [proxy-net, internal]
    environment:
      DATABASE_URL: ${DATABASE_URL}
      MASTER_ENCRYPTION_KEY: ${MASTER_ENCRYPTION_KEY}
      LLM_API_KEY: ${LLM_API_KEY}
    deploy:
      labels:
        - proxy.enable=true
        - proxy.host=mcp.kunde.de
        - proxy.tls.cert=letsencrypt
        - proxy.port=3000
      restart_policy:
        condition: any
        delay: 10s

  mcp-worker:
    image: registry.kunde.de/mcp-worker:${VERSION}
    networks: [internal]
    environment:
      DATABASE_URL: ${DATABASE_URL}
      WORKER_POLL_INTERVAL_MS: 60000
    command: # Worker-Process (Heartbeat-Polling)
    deploy:
      replicas: 1
      restart_policy:
        condition: any

networks:
  proxy-net: { external: true }
  internal: { driver: overlay }