---
version: "3.8"

services:
  app:
    entrypoint: ["/sso-entrypoint.sh", "/cryptpad/docker-entrypoint.sh"]
    environment:
      - SSO_PLUGIN_VERSION
      - "SSO_ENABLED=${SSO_ENABLED:-false}"
      - SSO_ENFORCED
      - SSO_PROVIDER_NAME
      - SSO_OIDC_URL
      - SSO_CLIENT_ID
      - SSO_JWT_ALG
    secrets:
      - sso_client_s
    volumes:
      - cryptpad_plugins:/cryptpad/lib/plugins
    configs:
      - source: sso_entrypoint
        target: /sso-entrypoint.sh
        mode: 0755
      - source: sso_js
        target: /sso.js

volumes:
  cryptpad_plugins:

secrets:
  sso_client_s:
    external: true
    name: ${STACK_NAME}_sso_client_s_${SSO_CLIENT_SECRET_VERSION}

configs:
  sso_entrypoint:
    name: ${STACK_NAME}_sso_entrypoint_${SSO_ENTRYPOINT_VERSION}
    file: sso-entrypoint.sh
  sso_js:
    name: ${STACK_NAME}_sso_js_${SSO_JS_VERSION}
    file: sso.js.tmpl
    template_driver: golang