services:
  authelia:
    container_name: 'authelia'
    image: 'docker.io/authelia/authelia:latest'
    restart: 'unless-stopped'
    secrets: ['JWT_SECRET', 'SESSION_SECRET', 'STORAGE_ENCRYPTION_KEY']
    environment:
      AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: '/run/secrets/JWT_SECRET'
      AUTHELIA_SESSION_SECRET_FILE: '/run/secrets/SESSION_SECRET'
      AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: '/run/secrets/STORAGE_ENCRYPTION_KEY'
      AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE: '/run/secrets/LDAP_BINDDN_PASSWORD'
    volumes:
      - ./config:/config
    networks:
      traefik-public:
        aliases: []
    labels:
      traefik.enable: 'true'
      traefik.http.routers.authelia.rule: 'Host(`authelia.alice.ufsj.edu.br`)'
      traefik.http.routers.authelia.entrypoints: 'websecure'
      traefik.http.routers.authelia.middlewares: 'authelia@docker'

networks:
  traefik-public:
    external: true

secrets:
  JWT_SECRET:
    file: './secrets/JWT_SECRET'
  SESSION_SECRET:
    file: './secrets/SESSION_SECRET'
  STORAGE_ENCRYPTION_KEY:
    file: './secrets/STORAGE_ENCRYPTION_KEY'
  LDAP_BINDDN_PASSWORD:
    file: './secrets/LDAP_BINDDN_PASSWORD'