version: "3.8"

services:
  architools:
    build:
      context: .
      args:
        - NEXT_PUBLIC_STORAGE_ADAPTER=${NEXT_PUBLIC_STORAGE_ADAPTER:-database}
        - NEXT_PUBLIC_APP_NAME=${NEXT_PUBLIC_APP_NAME:-ArchiTools}
        - NEXT_PUBLIC_APP_URL=${NEXT_PUBLIC_APP_URL:-https://tools.beletage.ro}
    container_name: architools
    restart: unless-stopped
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      # Database
      - DATABASE_URL=${DATABASE_URL:-postgresql://architools_user:stictMyFon34!_gonY@10.10.10.166:5432/architools_db?schema=public}
      # MinIO
      - MINIO_ENDPOINT=${MINIO_ENDPOINT:-10.10.10.166}
      - MINIO_PORT=${MINIO_PORT:-9002}
      - MINIO_USE_SSL=${MINIO_USE_SSL:-false}
      - MINIO_ACCESS_KEY=${MINIO_ACCESS_KEY:-admin}
      - MINIO_SECRET_KEY=${MINIO_SECRET_KEY:-MinioStrongPass123}
      - MINIO_BUCKET_NAME=${MINIO_BUCKET_NAME:-tools}
      # Authentication (Authentik OIDC)
      - NEXTAUTH_URL=${NEXTAUTH_URL:-https://tools.beletage.ro}
      - NEXTAUTH_SECRET=${NEXTAUTH_SECRET}
      - AUTHENTIK_CLIENT_ID=${AUTHENTIK_CLIENT_ID}
      - AUTHENTIK_CLIENT_SECRET=${AUTHENTIK_CLIENT_SECRET}
      - AUTHENTIK_ISSUER=${AUTHENTIK_ISSUER:-https://auth.beletage.ro/application/o/architools/}
    labels:
      - "com.centurylinklabs.watchtower.enable=true"