version: "3.8"

services:
  architools:
    build:
      context: .
      args:
        - NEXT_PUBLIC_STORAGE_ADAPTER=${NEXT_PUBLIC_STORAGE_ADAPTER:-database}
        - NEXT_PUBLIC_APP_NAME=${NEXT_PUBLIC_APP_NAME:-ArchiTools}
        - NEXT_PUBLIC_APP_URL=${NEXT_PUBLIC_APP_URL:-https://tools.beletage.ro}
    container_name: architools
    restart: unless-stopped
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      # Database
      - DATABASE_URL=postgresql://architools_user:stictMyFon34!_gonY@10.10.10.166:5432/architools_db?schema=public
      # MinIO
      - MINIO_ENDPOINT=10.10.10.166
      - MINIO_PORT=9002
      - MINIO_USE_SSL=false
      - MINIO_ACCESS_KEY=admin
      - MINIO_SECRET_KEY=MinioStrongPass123
      - MINIO_BUCKET_NAME=tools
      # Authentication (Authentik OIDC)
      - NEXTAUTH_URL=https://tools.beletage.ro
      - NEXTAUTH_SECRET=8IL9Kpipj0EZwZPNvekbNRPhV6a2/UY4cGVzE3n0pUY=
      - AUTHENTIK_CLIENT_ID=V59GMiYle87yd9VZOgUmdSmzYQALqNsKVAUR6QMi
      - AUTHENTIK_CLIENT_SECRET=TMeewkusUro0hQ2DMwS0Z5lNpNMdmziO9WXywNAGlK3Y6Y8HYULZBEtMtm53lioIkszWbpPRQcv1cxHMtwftMvsaSnbliDsL1f707wmUJhMFKjeZ0ypIFKFG4dJkp7Jr
      - AUTHENTIK_ISSUER=https://auth.beletage.ro/application/o/architools/
      # Vault encryption
      - ENCRYPTION_SECRET=ArchiTools-Vault-2025!SecureKey@AES256
    labels:
      - "com.centurylinklabs.watchtower.enable=true"