services:
  planka:
    image: ghcr.io/plankanban/planka:2.0.0-rc.3
    restart: on-failure
    volumes:
      - ./docker-data/planka/favicons:/app/public/favicons
      - ./docker-data/planka/user-avatars:/app/public/user-avatars
      - ./docker-data/planka/background-images:/app/public/background-images
      - ./docker-data/planka/attachments:/app/private/attachments
    ports:
      - 1337:1337
    environment:
      - BASE_URL=https://projects.omukk.dev
      - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASS}@postgres:5432/planka
      - SECRET_KEY=${PLANKA_SECRET_KEY}
      - OIDC_ISSUER=https://sso.omukk.dev/application/o/projects/
      - OIDC_CLIENT_ID=${PLANKA_OIDC_CLIENT_ID}
      - OIDC_CLIENT_SECRET=${PLANKA_OIDC_CLIENT_SECRET}

      - OIDC_SCOPES=openid email profile
      - OIDC_ADMIN_ROLES=admin
      - OIDC_ENFORCED=true
    networks:
      - omukk-network

networks:
  omukk-network:
    external: true