services:
  authelia:
    container_name: 'authelia'
    image: 'docker.io/authelia/authelia:latest'
    restart: 'unless-stopped'
    secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION_KEY', 'LDAP_BINDDN_PASSWORD']
    env_file:
      - .env
    volumes:
      - ./config:/config
    networks:
      traefik-public:
        aliases: []
    labels:
      traefik.enable: 'true'
      traefik.http.routers.authelia.rule: 'Host(`authelia.alice.ufsj.edu.br`)'
      traefik.http.routers.authelia.entrypoints: 'websecure'
      traefik.http.routers.authelia.middlewares: 'authelia@docker'

networks:
  traefik-public:
    external: true

secrets:
  JWT_SECRET:
    file: './secrets/JWT_SECRET'
  SESSION_SECRET:
    file: './secrets/SESSION_SECRET'
  STORAGE_ENCRYPTION_KEY:
    file: './secrets/STORAGE_ENCRYPTION_KEY'
  LDAP_BINDDN_PASSWORD:
    file: './secrets/LDAP_BINDDN_PASSWORD'