---
version: "3.8"

services:
  app:
    environment:
      - SAML_ADMINS
      - OIDCDB_USER=oidc
      - OIDCDB_PASSWORD_FILE=/run/secrets/oidcdb_password
      - OIDCDB_HOST=oidcdb
      - OIDC_DB=oidc
    secrets:
      - oidcdb_password

  oidcdb:
    image: "postgres:13-alpine"
    networks:
      - backend
    secrets:
      - oidcdb_password
    environment:
      - POSTGRES_DB=oidc
      - POSTGRES_USER=oidc
      - POSTGRES_PASSWORD_FILE=/run/secrets/oidcdb_password
    volumes:
      - "oidc_postgres:/var/lib/postgresql/data"
    deploy:
      labels:
          backupbot.backup: "true"
          backupbot.backup.pre-hook: 'bash -c "mkdir -p /tmp/backup/ && PGPASSWORD=$$(cat $${POSTGRES_PASSWORD_FILE}) pg_dump -U $${POSTGRES_USER} $${POSTGRES_DB} > /tmp/backup/backup.sql"'
          backupbot.backup.post-hook: "rm -rf /tmp/backup"
          backupbot.backup.path: "/tmp/backup/"

secrets:
  oidcdb_password:
    external: true
    name: ${STACK_NAME}_oidcdb_password_${OIDCDB_PASSWORD_VERSION}

volumes:
  oidc_postgres: