---
version: "3.8"

services:
  app:
    environment:
      - APP_SERVICES_ENABLED
      - APP_SERVICE_CONFIGS
    volumes:
      - telegram-data:/telegram-data

  telegrambridge:
    image: dock.mau.dev/mautrix/telegram:v0.15.1
    depends_on:
      - telegramdb
    configs:
      - source: telegram_bridge_yaml
        target: /data/config.yaml
    environment:
      - APP_SERVICE_BOT_USERNAME
      - APP_SERVICE_DISPLAY_NAME
      - APP_SERVICE_ID
      - ENABLE_ENCRYPTION
      - HOMESERVER_DOMAIN
      - HOMESERVER_URL
      - TELEGRAM_APP_ID
      - TELEGRAM_BRIDGE_PERMISSIONS
      - TELEGRAM_SYNC_CHANNEL_MEMBERS
      - VERIFY_SSL
    secrets:
      - telegram_api_hash
      - telegram_as_token
      - telegram_bot_token
      - telegram_db_password
      - telegram_hs_token
      - shared_secret_auth
    volumes:
      - telegram-data:/data
    networks:
      - internal

  telegramdb:
    image: postgres:13-alpine
    secrets:
      - telegram_db_password
    environment:
      - LC_COLLATE=C
      - LC_CTYPE=C
      - POSTGRES_DB=telegrambridge
      - POSTGRES_INITDB_ARGS="-E \"UTF8\""
      - POSTGRES_PASSWORD_FILE=/run/secrets/telegram_db_password
      - POSTGRES_USER=telegrambridge
    networks:
      - internal
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "$POSTGRES_USER" ]
    volumes:
      - telegram-postgres:/var/lib/postgresql/data

configs:
  telegram_bridge_yaml:
    name: ${STACK_NAME}_telegram_bridge_yaml_${TELEGRAM_BRIDGE_YAML_VERSION}
    file: telegram_bridge.yaml.tmpl
    template_driver: golang

volumes:
  telegram-data:
  telegram-postgres:

secrets:
  telegram_db_password:
    external: true
    name: ${STACK_NAME}_telegram_db_password_${SECRET_TELEGRAM_DB_PASSWORD_VERSION}
  telegram_api_hash:
    external: true
    name: ${STACK_NAME}_telegram_api_hash_${SECRET_TELEGRAM_API_HASH_VERSION}
  telegram_bot_token:
    external: true
    name: ${STACK_NAME}_telegram_bot_token_${SECRET_TELEGRAM_BOT_TOKEN_VERSION}
  telegram_as_token:
    external: true
    name: ${STACK_NAME}_telegram_as_token_${SECRET_TELEGRAM_AS_TOKEN_VERSION}
  telegram_hs_token:
    external: true
    name: ${STACK_NAME}_telegram_hs_token_${SECRET_TELEGRAM_HS_TOKEN_VERSION}