# mcp-proxy — local overrides.
#   docker compose -f docker-compose.yaml -f docker-compose.local.yaml up --build
#   (make run-local)
# Fronts the DEPLOYED QA apollo-mcp and the live qa-orchard Auth0 client from
# your laptop. Be on VPN so qa-apollo-mcp.theorchard.io resolves and is
# reachable from the container.
services:
  mcp-proxy:
    environment:
      # Docker's embedded DNS — compose networks are user-defined, so it exists
      # and forwards to host DNS (VPN names resolve). The AWS VPC resolver
      # default baked into the image only works when deployed.
      RESOLVER: 127.0.0.11
      # What the PRM / AS metadata / 401 challenge advertise as the resource +
      # issuer — must be the origin clients connect to, i.e. this proxy on
      # localhost.
      PROXY_ORIGIN: http://localhost:8080