version: '3.8'
services:
  tinyauth:
    container_name: tinyauth
    image: ghcr.io/steveiliop56/tinyauth:v5-distroless
    restart: unless-stopped
    environment:
      - TINYAUTH_APPURL=https://tinyauth.lexformatique.fr
      - TINYAUTH_AUTH_USERS=admin:$$2b$$05$$p28xmF5ztKu6NGdBTaF8KeiAX1TIS.A6bGUsau4LgiPKcXxv7d3MK # user:password
      - TINYAUTH_SECRET=qbIvlkpBgROVt1RxASSTK0UVTa04LmBS
      - TINYAUTH_UI_TITLE=LEXFORMATIQUE
      - TINYAUTH_LOG_LEVEL=debug
      - TINYAUTH_RESOURCES_PATH=/data/resources
      - TINYAUTH_UI_BACKGROUNDIMAGE=/resources/wallpaper.jpg

      - TINYAUTH_LDAP_ADDRESS=ldap://995-stack-lldap-lldap-1:3890
      - TINYAUTH_LDAP_BINDDN=uid=service-ldap,ou=people,dc=lexformatique,dc=fr
      - TINYAUTH_LDAP_BINDPASSWORD=Admin69*
      - TINYAUTH_LDAP_BASEDN=dc=lexformatique,dc=fr
      - TINYAUTH_LDAP_SEARCHFILTER=(uid=%s)
      - TINYAUTH_LDAP_INSECURE=true
   
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /data/tinyauth/data:/data
      #- /data/resources/wallpaper.jpg:/data/resources/wallpaper.jpg:ro
    labels:
      wud.trigger.include: gotify.mygorify,dockercompose.tinyauth
    
    networks:
      - 001-stack-npm_nginx-proxy
    # Pas de ports exposés : accès uniquement via NPM

networks:
  001-stack-npm_nginx-proxy:
    external: true  # Réseau créé par NPM