version: '3'

services:
  auth_web:
    build:
      args:
        - APP_BASE_PATH=${APP_BASE_PATH}
        - APP_DESCRIPTION=${APP_DESCRIPTION}
        - TELEGRAM_BOT_URL=${TELEGRAM_BOT_URL}
      context: .
      dockerfile: ./apps/web/Dockerfile
    environment:
      - APP_BASE_PATH=${APP_BASE_PATH}
      - APP_DESCRIPTION=${APP_DESCRIPTION}
      - TELEGRAM_BOT_URL=${TELEGRAM_BOT_URL}
    restart: always
    networks:
      - auth_network

  auth_api:
    build:
      context: .
      dockerfile: ./apps/api/Dockerfile
    environment:
      - LDAP_BIND_DN=${LDAP_BIND_DN}
      - LDAP_BIND_CREDENTIALS=${LDAP_BIND_CREDENTIALS}
      - LDAP_DOMAIN=${LDAP_DOMAIN}
      - LDAP_URL=${LDAP_URL}
      - LDAP_BASE=${LDAP_BASE}
      - LDAP_ATTRIBUTE=${LDAP_ATTRIBUTE}
      - API_SECRET=${API_SECRET}
      - API_TOKEN_TTL=${API_TOKEN_TTL}
      - API_CACHE_TTL=${API_CACHE_TTL}
      - COOKIE_TOKEN_NAME=${COOKIE_TOKEN_NAME}
      - COOKIE_TOKEN_MAX_AGE=${COOKIE_TOKEN_MAX_AGE}
      - REDIS_HOST=redis
      - MONGO_HOST=mongo
      - TELEGRAM_URL_SEND_AUTH_MESSAGE=${TELEGRAM_URL_SEND_AUTH_MESSAGE}
      - TELEGRAM_URL_SEND_AUTH_LOGIN=${TELEGRAM_URL_SEND_AUTH_LOGIN}
      - TELEGRAM_URL_SEND_AUTH_PASSWORD=${TELEGRAM_URL_SEND_AUTH_PASSWORD}
    restart: always
    networks:
      - auth_network

  redis:
    image: redis:7-alpine
    environment:
      ALLOW_EMPTY_PASSWORD: 'yes'
    networks:
      - auth_network
    restart: always

  mongo:
    image: mongo:latest
    networks:
      - auth_network
    restart: always
    volumes:
      - /opt/docker-volumes/auth_dev:/data/db

  server:
    extends:
      file: docker-compose.traefik.yml
      service: server
    image: nginx:alpine
    volumes:
      - ./config/nginx.conf:/etc/nginx/templates/default.conf.template
    restart: always
    depends_on:
      - auth_api
      - redis
    networks:
      - auth_network

volumes:
  mongo:

networks:
  auth_network:
    external:
      name: auth_network
  web:
    external: true