# TLS overlay for gateway HTTPS
#
# Usage:
#   1. Place your TLS certificate in ./certs/gateway.crt
#
#   2. Place your TLS private key in ./secrets/gateway_key
#
#   3. Configure quickstart.conf with HTTPS URL and TLS paths:
#      gateway:
#        url: "https://your-gateway.example.com/mcp"
#        tls:
#          cert_file: "/certs/gateway.crt"
#          key_file: "/run/secrets/gateway_key"
#
#   4. Include this file when starting:
#      GATEWAY_PORT=443 COMPOSE_PROFILES=agentgateway docker compose -f docker-compose.yaml -f docker-compose.tls.yaml up --build
#
#      Or with envoy:
#      GATEWAY_PORT=443 COMPOSE_PROFILES=envoy docker compose -f docker-compose.yaml -f docker-compose.tls.yaml up --build

services:
  agentgateway:
    volumes:
      - ./certs:/certs:ro
    secrets:
      - gateway_key

  envoy:
    volumes:
      - ./certs:/certs:ro
    secrets:
      - gateway_key

secrets:
  gateway_key:
    file: ./secrets/gateway_key
