name: unraid-appops-gateway
services:
  appops-gateway:
    build: .
    image: unraid-appops-gateway:local
    env_file:
      - path: .env
        required: false
    environment:
      APPOPS_SECRET_KEY_FILE: "${APPOPS_SECRET_KEY_FILE:-/data/secret-key}"
      APPOPS_AUTH_PUBLIC_URL: "${APPOPS_AUTH_PUBLIC_URL:-}"
      APPOPS_FRONTEND_ORIGIN: "${APPOPS_FRONTEND_ORIGIN:?Set the exact HTTPS browser origin}"
      APPOPS_AUTH_ADMIN_EMAILS: "${APPOPS_AUTH_ADMIN_EMAILS:-}"
      APPOPS_AUTH_ADMIN_SUBJECTS: "${APPOPS_AUTH_ADMIN_SUBJECTS:-}"
      APPOPS_AUTHENTIK_ISSUER: "${APPOPS_AUTHENTIK_ISSUER:-}"
      APPOPS_AUTHENTIK_ENTRA_SOURCE: "${APPOPS_AUTHENTIK_ENTRA_SOURCE:-}"
      APPOPS_AUTHENTIK_CLIENT_ID: "${APPOPS_AUTHENTIK_CLIENT_ID:-}"
      APPOPS_AUTHENTIK_CLIENT_SECRET_FILE: "${APPOPS_AUTHENTIK_CLIENT_SECRET_FILE:-/data/authentik-oidc-secret}"
      APPOPS_ENTRA_TENANT_ID: "${APPOPS_ENTRA_TENANT_ID:-}"
      APPOPS_ENTRA_CLIENT_ID: "${APPOPS_ENTRA_CLIENT_ID:-}"
      APPOPS_ENTRA_CLIENT_SECRET_FILE: "${APPOPS_ENTRA_CLIENT_SECRET_FILE:-/data/entra-oidc-secret}"
      APPOPS_OPERATOR_PROXY_AUTH: "${APPOPS_OPERATOR_PROXY_AUTH:-false}"
      APPOPS_OPERATOR_PROXY_TRUSTED_NETWORKS: "${APPOPS_OPERATOR_PROXY_TRUSTED_NETWORKS:-}"
      APPOPS_ENABLE_MCP: "false"
      APPOPS_ENABLE_N8N: "false"
    ports:
      - "127.0.0.1:1216:1216"
    volumes:
      - ./data:/data
    restart: unless-stopped