name: ${_STACK_0}

networks:
  net:
    name: ${_NET_0}
    external: true

secrets:
  JWT_SECRET:
    file: './secrets/JWT_SECRET'
  SESSION_SECRET:
    file: './secrets/SESSION_SECRET'
  STORAGE_ENCRYPTION:
    file: './secrets/STORAGE_ENCRYPTION'
  OIDC_HMAC_SECRET:
    file: './secrets/OIDC_HMAC_SECRET'

services:
  auth:
    container_name: ${_CONTAINER_0}
    image: authelia/authelia:latest
    restart: unless-stopped
    user: '${UID}:${GID}'
    secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION', OIDC_HMAC_SECRET]
    env_file:
      - .auth.env # Runtime Vars
      - .env # Stack Vars
    volumes:
      - ./config/:/config
    networks:
      - net
    expose:
      - 9091