ssh-session-mcp/docker-compose.env.yml at main · Zw-awa/ssh-session-mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# SPDX-FileCopyrightText: 2026 Zw-awa
# SPDX-License-Identifier: Apache-2.0

services:
  ssh-session-mcp:
    image: ${SSH_SESSION_MCP_IMAGE:-docker.io/zwawa/ssh-session-mcp:latest}
    container_name: ssh-session-mcp-env
    restart: unless-stopped
    stdin_open: true
    tty: false
    ports:
      - "8793:8793"
    environment:
      VIEWER_PORT: "8793"
      VIEWER_HOST: "0.0.0.0"
      AUTO_OPEN_TERMINAL: "false"
      SSH_MCP_STATE_DIR: /workspace/state
      SSH_MCP_LOG_MODE: stderr
      SSH_HOST: "${SSH_HOST}"
      SSH_PORT: "${SSH_PORT:-22}"
      SSH_USER: "${SSH_USER}"
      SSH_PASSWORD: "${SSH_PASSWORD:-}"
      SSH_PASSWORD_FILE: "${SSH_PASSWORD_FILE:-}"
      SSH_KEY: "${SSH_KEY:-}"
      SSH_KEY_FILE: "${SSH_KEY_FILE:-}"
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:8793/readyz').then((response)=>{if(!response.ok)process.exit(1);}).catch(()=>process.exit(1));"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s
    volumes:
      - type: volume
        source: ssh-session-mcp-state
        target: /workspace/state
      - type: bind
        source: ${SSH_KEY_DIR:-./keys}
        target: /workspace/keys
        read_only: true

volumes:
  ssh-session-mcp-state: