# WARNING: This is a CI docker-compose file used for building and testing of the entire app, it should not be used for production.
services:

  fullstack:
    environment:
      NPM_DB_DRIVER: 'postgres'
      NPM_DB_HOST: 'db-postgres'
      NPM_DB_PORT: '5432'
      NPM_DB_USERNAME: 'npm'
      NPM_DB_PASSWORD: 'npmpass'
      NPM_DB_NAME: 'npm'
      NPM_DB_SSLMODE: 'disable'
    depends_on:
      - db-postgres
      - authentik
      - authentik-worker
      - authentik-ldap

  db-postgres:
    image: postgres:latest
    environment:
      POSTGRES_USER: 'npm'
      POSTGRES_PASSWORD: 'npmpass'
      POSTGRES_DB: 'npm'
    volumes:
      - psql_vol:/var/lib/postgresql/data
      - ./ci/postgres:/docker-entrypoint-initdb.d

  authentik-redis:
    image: 'redis:alpine'
    command: --save 60 1 --loglevel warning
    restart: unless-stopped
    healthcheck:
      test: ['CMD-SHELL', 'redis-cli ping | grep PONG']
      start_period: 20s
      interval: 30s
      retries: 5
      timeout: 3s
    volumes:
      - redis_vol:/data

  authentik:
    image: ghcr.io/goauthentik/server:2024.8.3
    restart: unless-stopped
    command: server
    env_file:
      - ci.env
    depends_on:
      - authentik-redis
      - db-postgres

  authentik-worker:
    image: ghcr.io/goauthentik/server:2024.8.3
    restart: unless-stopped
    command: worker
    env_file:
      - ci.env
    depends_on:
      - authentik-redis
      - db-postgres

  authentik-ldap:
    image: ghcr.io/goauthentik/ldap
    environment:
      AUTHENTIK_HOST: 'http://authentik:9000'
      AUTHENTIK_INSECURE: 'true'
      AUTHENTIK_TOKEN: '1N7z2r5PZrNBauuyDZSnlhU4gPSih7bkooIgqbvhzBbrA1MGYyDGZmBasJqU'
    restart: unless-stopped
    depends_on:
      - authentik

volumes:
  psql_vol:
  redis_vol: