---
version: "3.8"

services:
  app:
    secrets:
      - oidc_client_secret
    environment:
      - OIDC_AUTH_URI
      - OIDC_CLIENT_ID
      - OIDC_DISPLAY_NAME
      - OIDC_ENABLED
      - OIDC_SCOPES
      - OIDC_TOKEN_URI
      - OIDC_USERINFO_URI
      - OIDC_USERNAME_CLAIM

secrets:
  oidc_client_secret:
    name: ${STACK_NAME}_oidc_client_secret_${SECRET_OIDC_CLIENT_SECRET_VERSION}
    external: true