version: "3.5"

services:
  squidex_mongo:
    container_name: {{ customer }}-squidex-mongo
    image: "mongo:6"
    restart: always
    volumes:
      - {{ customer }}-squidex-mongo:/data/db
      - {{ customer }}-squidex-backups:/tmp/backups
    networks:
      {{ customer }}-squidex:
        ipv4_address: 172.20.12.2

  squidex_squidex:
    container_name: {{ customer }}-squidex-squidex
    image: "squidex/squidex:7"
    restart: always
    labels:
      - "diun.enable=true"
    ports:
      - "127.0.0.1:3002:80"
    environment:
      URLS__BASEURL: 'https://{{ domain_squidex }}'
      UI__ONLYADMINSCANCREATEAPPS: false
      UI__ONLYADMINSCANCREATETEAMS: false
      EVENTSTORE__TYPE: MongoDB
      EVENTSTORE__MONGODB__CONFIGURATION: mongodb://squidex_mongo
      STORE__MONGODB__CONFIGURATION: mongodb://squidex_mongo
      IDENTITY__ADMINEMAIL: {{ squidex_adminemail }}
      IDENTITY__ADMINPASSWORD: {{ squidex_adminpassword }}
      # - IDENTITY__GOOGLECLIENT=${SQUIDEX_GOOGLECLIENT}
      # - IDENTITY__GOOGLESECRET=${SQUIDEX_GOOGLESECRET}
      # - IDENTITY__GITHUBCLIENT=${SQUIDEX_GITHUBCLIENT}
      # - IDENTITY__GITHUBSECRET=${SQUIDEX_GITHUBSECRET}
      # - IDENTITY__MICROSOFTCLIENT=${SQUIDEX_MICROSOFTCLIENT}
      # - IDENTITY__MICROSOFTSECRET=${SQUIDEX_MICROSOFTSECRET}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80/healthz"]
      start_period: 60s
    depends_on:
      - squidex_mongo
    volumes:
      - {{ customer }}-squidex-assets:/app/Assets
      - {{ customer }}-squidex-backups:/tmp/backups
    networks:
      {{ customer }}-squidex:
        ipv4_address: 172.20.12.3

networks:
  {{ customer }}-squidex:
    ipam:
      driver: default
      config:
        - subnet: 172.20.12.0/28
          gateway: 172.20.12.1

volumes:
  {{ customer }}-squidex-mongo:
  {{ customer }}-squidex-assets:
  {{ customer }}-squidex-backups: