version: '3.8'
services:
  tinyauth:
    container_name: tinyauth
    image: ghcr.io/steveiliop56/tinyauth:v5-distroless
    restart: unless-stopped
    environment:
      - TINYAUTH_APP_URL=https://tinyauth.lexformatique.fr
      - TINYAUTH_USERS=admin:$$2b$$05$$p28xmF5ztKu6NGdBTaF8KeiAX1TIS.A6bGUsau4LgiPKcXxv7d3MK # user:password
      - TINYAUTH_SECRET=qbIvlkpBgROVt1RxASSTK0UVTa04LmBS
      - TINYAUTH_APP_TITLE=LEXFORMATIQUE
      - TINYAUTH_LOG_LEVEL=debug
      - TINYAUTH_RESOURCES_DIR=/data/resources
      - TINYAUTH_BACKGROUND_IMAGE=/resources/wallpaper.jpg

      - LDAP_ADDRESS=ldap://995-stack-lldap-lldap-1:3890
      - LDAP_BIND_DN=uid=service-ldap,ou=people,dc=lexformatique,dc=fr
      - LDAP_BIND_PASSWORD=Admin69*
      - LDAP_BASE_DN=dc=lexformatique,dc=fr
      - LDAP_SEARCH_FILTER=(uid=%s)
      - LDAP_INSECURE=true
   
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /data/tinyauth/data:/data
      #- /data/resources/wallpaper.jpg:/data/resources/wallpaper.jpg:ro
    labels:
      wud.trigger.include: gotify.mygorify,dockercompose.tinyauth
    
    networks:
      - 001-stack-npm_nginx-proxy
    # Pas de ports exposés : accès uniquement via NPM

networks:
  001-stack-npm_nginx-proxy:
    external: true  # Réseau créé par NPM