summaryrefslogtreecommitdiff
path: root/stacks/iam/compose.yml
blob: af25bb9f52cdaa3712eee5baaa18df325fb35f94 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
name: ${_STACK_0}

networks:
  net_0:
    name: ${_NET_0}
    external: true
  net_1:
    name: ${_NET_1}

volumes:
  volume_0:
    name: ${_VOLUME_0}
    external: true

secrets:
  JWT_SECRET:
    file: '/srv/secrets/auth/JWT_SECRET'
  SESSION_SECRET:
    file: '/srv/secrets/auth/SESSION_SECRET'
  STORAGE_ENCRYPTION:
    file: '/srv/secrets/auth/STORAGE_ENCRYPTION'
  OIDC_HMAC_SECRET:
    file: '/srv/secrets/auth/OIDC_HMAC_SECRET'

services:
  auth:
    container_name: ${_CONTAINER_0}
    image: authelia/authelia:latest
    restart: unless-stopped
    secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION', 'OIDC_HMAC_SECRET']
    env_file:
      - .auth.env # Runtime Vars
      - .env # Stack Vars
    volumes:
      - volume_0:/config/db
      - /srv/secrets/auth/configuration.yml:/config/configuration.yml
      - /srv/secrets/auth/users.yml:/config/users.yml
      - /srv/secrets/auth/jwks/oidc-jwk.pem:/config/jwks/oidc-jwk.pem
      - /srv/secrets/auth/jwks/oidc-jwk-pub.pem:/config/jwks/oidc-jwk-pub.pem
    networks:
      - net_0
      - net_1
    expose:
      - 9091
  auth-cache:
    container_name: ${_CONTAINER_1}
    image: redis:latest
    restart: unless-stopped
    env_file:
      - .env
    networks:
      - net_1
    expose:
      - 6379