---
version: "3.8"

services:
  app:
    environment:
      - OIDC_ENABLED
      - OIDC_DISPLAY_NAME
      - OIDC_DISCOVERY
      - OIDC_ISSUER
      - OIDC_AUTH_ENDPOINT
      - OIDC_SCOPE
      - OIDC_UID_FIELD
      - OIDC_CLIENT_ID
      - OIDC_REDIRECT_URI
      - OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED
      - OMNIAUTH_ONLY
      - ONE_CLICK_SSO_LOGIN
      - OIDC_CLIENT_SECRET_FILE=/run/secrets/oidc_client_secret
    secrets:
      - oidc_client_secret

secrets:
  oidc_client_secret:
    name: ${STACK_NAME}_oidc_client_secret_${SECRET_OIDC_CLIENT_SECRET_VERSION}
    external: true