services:
  front:
    image: tombursch/kitchenowl-web:latest
    container_name: kitchenowl-front
    restart: unless-stopped
    environment:
      - BACK_URL=back:5000
      - FRONT_URL=https://kitchen.castaldifamily.com
    depends_on:
      - back
    networks:
      - proxy-net
      - kitchenowl-internal
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.kitchenowl.rule=Host(`kitchen.castaldifamily.com`)"
      - "traefik.http.routers.kitchenowl.entrypoints=websecure"
      - "traefik.http.routers.kitchenowl.tls.certresolver=cloudflare"
      - "traefik.http.services.kitchenowl.loadbalancer.server.port=80"

  back:
    image: tombursch/kitchenowl-backend:latest
    container_name: kitchenowl-back
    restart: unless-stopped
    environment:
      - JWT_SECRET_KEY=9Ig5xmtOsqPwDkqVg/xrNy+EYeFcbbM8gOmcHma7r8k=
      - OIDC_CLIENT_ID=BDG8dHDy8AZBUfaLMb2YNPbM1mvSvoPOFGaHtyfP
      - OIDC_CLIENT_SECRET=7737O1vbQkdEngGx6U1AJY0X05YyqsCtmfNOZpkYaV6JohM5HktxDoNJHOOaOrpm1Cw2CjnV9ULsKY1F7P4EfVgpKilK6E8aTbQHYQsOcT3PmfSJNGZonRTOJqo1HJ8h
      - OIDC_ISSUER=https://sso.castaldifamily.com/application/o/kitchen-owl/
    volumes:
      - /mnt/appdata/kitchenowl/data:/data
    networks:
      - kitchenowl-internal

networks:
  proxy-net:
    external: true
  kitchenowl-internal:
    internal: true