version: '3.8'

services:
  playchoo-manager-auth:
    image: "${DOCKER_IMAGE}"
    pull_policy: always
    container_name: "${REVERSE_DOMAIN}"
    environment:
      NODE_ENV: ${NODE_ENV}
      APP_PORT: ${APP_PORT}
      APPLICATION_NAME: ${APPLICATION_NAME}
      CORS_ALLOWED_ORIGIN: ${CORS_ALLOWED_ORIGIN}
      CORS_CREDENTIALS: ${CORS_CREDENTIALS}
      CORS_METHODS: ${CORS_METHODS}
      CORS_HEADERS: ${CORS_HEADERS}
      CORS_MAX_AGE: ${CORS_MAX_AGE}
      SKIP_CORS: ${SKIP_CORS}
      SWISSOID_CLIENT_ID: ${SWISSOID_CLIENT_ID}
      SWISSOID_CLIENT_SECRET: ${SWISSOID_CLIENT_SECRET}
      SWISSOID_ISSUER: ${SWISSOID_ISSUER}
      SWISSOID_JWKS_URI: ${SWISSOID_JWKS_URI}
      SWISSOID_TOKEN_ENDPOINT: ${SWISSOID_TOKEN_ENDPOINT}
      SWISSOID_AUTHORIZE_ENDPOINT: ${SWISSOID_AUTHORIZE_ENDPOINT}
      REDIS_URL: ${REDIS_URL}
      SESSION_COOKIE_NAME: ${SESSION_COOKIE_NAME}
      REFRESH_COOKIE_NAME: ${REFRESH_COOKIE_NAME}
      SESSION_SECRET: ${SESSION_SECRET}
      STATE_SIGNING_SECRET: ${STATE_SIGNING_SECRET}
      SESSION_TTL: ${SESSION_TTL}
      REFRESH_TTL: ${REFRESH_TTL}
      OIDC_REDIRECT_BASE_URL: ${OIDC_REDIRECT_BASE_URL}
      RP_FRONTEND_URL: ${RP_FRONTEND_URL}
      RP_COOKIE_DOMAIN: ${RP_COOKIE_DOMAIN}
      COOKIE_DOMAIN: ${COOKIE_DOMAIN}
      POST_LOGIN_PATH: ${POST_LOGIN_PATH}
      ALLOW_CONTINUE_PARAM: ${ALLOW_CONTINUE_PARAM}
      TRUST_PROXY: ${TRUST_PROXY}
      HEALTH_CHECK_PATH: ${HEALTH_CHECK_PATH}
      HEALTH_CHECK_RESPONSE: ${HEALTH_CHECK_RESPONSE}
      SECURE_COOKIES: ${SECURE_COOKIES}
      LOGGER_LOG: ${LOGGER_LOG}
      LOGGER_DEBUG: ${LOGGER_DEBUG}
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.${REVERSE_DOMAIN}.rule=Host(`${APPLICATION_DOMAIN_NAME}`)"
      - "traefik.http.routers.${REVERSE_DOMAIN}.entrypoints=websecure"
      - "traefik.http.routers.${REVERSE_DOMAIN}.tls.certresolver=myresolver"
      - "traefik.http.services.${REVERSE_DOMAIN}.loadbalancer.server.port=${APP_PORT}"
      - "traefik.docker.network=shared_network"
    networks:
      - shared_network
      - playchoo_redis_network
    restart: unless-stopped

networks:
  shared_network:
    name: shared_network
    external: true
  playchoo_redis_network:
    name: playchoo_redis_network
    external: true