version: '3.8'

services:
  app:
    image: ${REG}/plantilla-nuxt-authentik:latest
    container_name: plantilla-nuxt-authentik
    restart: unless-stopped
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      - NUXT_HOST=0.0.0.0
      - NUXT_PORT=3000
      # OAuth Authentik configuration
      - NUXT_OAUTH_AUTHENTIK_CLIENT_ID=${NUXT_OAUTH_AUTHENTIK_CLIENT_ID}
      - NUXT_OAUTH_AUTHENTIK_CLIENT_SECRET=${NUXT_OAUTH_AUTHENTIK_CLIENT_SECRET}
      - NUXT_OAUTH_AUTHENTIK_SERVER_URL=${NUXT_OAUTH_AUTHENTIK_SERVER_URL}
      - NUXT_OAUTH_AUTHENTIK_SERVER_URL_INTERNAL=${NUXT_OAUTH_AUTHENTIK_SERVER_URL_INTERNAL}
      - NUXT_OAUTH_AUTHENTIK_REDIRECT_URL=${NUXT_OAUTH_AUTHENTIK_REDIRECT_URL}
      - NUXT_PUBLIC_APP_URL=${NUXT_PUBLIC_APP_URL}
      - NUXT_SESSION_PASSWORD=${NUXT_SESSION_PASSWORD}
    networks:
      - principal
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.plantilla-nuxt.rule=Host(`${APP_DOMAIN}`)"
      - "traefik.http.routers.plantilla-nuxt.entrypoints=websecure"
      - "traefik.http.routers.plantilla-nuxt.tls.certresolver=letsencrypt"
      - "traefik.http.services.plantilla-nuxt.loadbalancer.server.port=3000"

networks:
  principal:
    external: true