version: "3.8"

services:
  app:
    secrets:
      - oidc_secret
    environment:
      - GTS_OIDC_ENABLED
      - GTS_OIDC_IDP_NAME
      - GTS_OIDC_SKIP_VERIFICATION
      - GTS_OIDC_ISSUER
      - GTS_OIDC_CLIENT_ID
      - GTS_OIDC_CLIENT_SECRET
      - GTS_OIDC_SCOPES
      - GTS_OIDC_LINK_EXISTING
      - GTS_OIDC_ALLOWED_GROUPS
      - GTS_OIDC_ADMIN_GROUPS

secrets:
  oidc_secret:
    name: ${STACK_NAME}_oidc_secret_${SECRET_OIDC_SECRET_VERSION}
    external: true