07b1cb84b2
This commit implements several key improvements to the GeoGuessr MCP server: ## MCP Server Authentication - Add Bearer token authentication for MCP server access control - New middleware in src/geoguessr_mcp/middleware/auth.py - Configuration via MCP_AUTH_ENABLED and MCP_API_KEYS environment variables - Support for multiple API keys (comma-separated) - Optional authentication - can be disabled for trusted deployments - Clients connect using Authorization: Bearer YOUR_API_KEY header ## Docker Configuration Updates - Update to use official pre-built image: nyxiumyuuki/geoguessr-mcp:latest - Remove DOCKER_USERNAME and IMAGE_TAG from environment variables - Simplify docker-compose.yml and docker-compose.prod.yml - Remove healthcheck configuration (not necessary for the deployment) ## Deployment Improvements - Move deploy.sh to scripts/deploy.sh for better organization - Update deploy.sh to use official Docker image - Add authentication validation in deployment script - Improve deployment logging and error messages ## Documentation Updates - Update README.md with authentication configuration examples - Add MCP server authentication section with setup instructions - Update environment variables table - Simplify deployment instructions - Update CLAUDE.md with new authentication architecture - Add .env.example configuration for MCP authentication ## Technical Details - Authentication middleware integrates with FastMCP's Starlette ASGI app - Middleware validates Bearer tokens on all requests except /health - Logs authentication attempts and failures - Returns proper 401/403 HTTP status codes - Validates configuration on startup to prevent misconfiguration Resolves TODO items: - [x] Fix Docker username in compose files and env vars - [x] Add authentication to MCP server to allow access only to specific users
38 lines
823 B
YAML
38 lines
823 B
YAML
# Production deployment for VPS with existing nginx-proxy-manager
|
|
# This configuration connects to an existing nginx-proxy-manager for SSL/HTTPS
|
|
|
|
services:
|
|
geoguessr-mcp:
|
|
# Use pre-built image from Docker Hub
|
|
image: nyxiumyuuki/geoguessr-mcp:latest
|
|
|
|
container_name: geoguessr-mcp-server
|
|
restart: unless-stopped
|
|
|
|
# Use expose instead of ports - only accessible through proxy
|
|
expose:
|
|
- "8000"
|
|
|
|
env_file:
|
|
- .env
|
|
|
|
volumes:
|
|
- geoguessr-schemas:/app/data/schemas
|
|
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "5"
|
|
|
|
# Connect to the same network as nginx-proxy-manager
|
|
networks:
|
|
- firefly_network
|
|
|
|
volumes:
|
|
geoguessr-schemas:
|
|
name: geoguessr-mcp-schemas-prod
|
|
|
|
networks:
|
|
firefly_network:
|
|
external: true
|