networks:
  tutorotp:

volumes:
  postgres_data:

secrets:
  postgres_password:
    file: ./postgres_password.txt

services:
  web:
    build: .
    image: pinlin/tutorotp:latest
    networks:
      - tutorotp
    environment:
      NODE_ENV: production
      PORT: 3000
      PGHOST: postgres
      PGPORT: 5432
      PGUSER: tutorotp
      PGPASSWORD:
      PGDATABASE: tutorotp
      ACTIVATION_CODE:
      OIDC_WELL_KNOWN_URL:
      CLIENT_ID:
      CLIENT_SECRET:
      COOKIE_SECRET:
    ports:
      - "3000:3000"
    depends_on:
      - postgres
    restart: always

  postgres:
    image: postgres:16.4-alpine
    restart: always
    networks:
      - tutorotp
    volumes:
      - postgres_data:/var/lib/postgresql/data/
    secrets:
      - postgres_password
    environment:
      POSTGRES_DB: tutorotp
      POSTGRES_USER: tutorotp
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres_password