version: "3"
services:

  outline:
    image: outlinewiki/outline
    container_name: outline
    ports:
      - 3000:3000
    restart: always
    depends_on:
      - postgres
      - redis
    environment:
      SECRET_KEY: ${SECRET_KEY}
      UTILS_SECRET: ${UTILS_SECRET}
      DATABASE_URL: ${DATABASE_URL}
      DATABASE_URL_TEST: ${DATABASE_URL_TEST}
      REDIS_URL: ${REDIS_URL}
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
      AWS_S3_UPLOAD_BUCKET_URL: ${AWS_S3_UPLOAD_BUCKET_URL}
      AWS_S3_UPLOAD_BUCKET_NAME: ${AWS_S3_UPLOAD_BUCKET_NAME}
      AWS_S3_ACL: ${AWS_S3_ACL}
      FORCE_HTTPS: ${FORCE_HTTPS}
      ENABLE_UPDATES: ${ENABLE_UPDATES}
      WEB_CONCURRENCY: ${WEB_CONCURRENCY}
      MAXIMUM_IMPORT_SIZE: ${MAXIMUM_IMPORT_SIZE}
      DEBUG: ${DEBUG}
      DEFAULT_LANGUAGE: ${DEFAULT_LANGUAGE}
      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID} 
      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
      OIDC_AUTH_URI: ${OIDC_AUTH_URI}
      OIDC_TOKEN_URI: ${OIDC_TOKEN_URI}
      OIDC_USERINFO_URI: ${OIDC_USERINFO_URI}
      OIDC_DISPLAY_NAME: ${OIDC_DISPLAY_NAME}
      OIDC_SCOPES: ${OIDC_SCOPES}
      PGSSLMODE: "disable"
      PORT: 3000
      URL: "https://outline.lino.cooking"
    networks:
      - internal
      - reverse-proxy

  redis:
    image: redis
    container_name: outline-redis
    restart: always
    volumes:
      - /mnt/SSD500/docker/outline/redis.conf:/redis.conf
    command: ["redis-server", "/redis.conf"]
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 30s
      retries: 3
    networks:
      - internal

  postgres:
    image: postgres
    container_name: outline-postgres
    restart: always
    volumes:
      - /mnt/SSD500/docker/outline/db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready"]
      interval: 30s
      timeout: 20s
      retries: 3
    environment:
      POSTGRES_USER: user
      POSTGRES_PASSWORD: pass
      POSTGRES_DB: outline
      PGSSLMODE: "disable"
    networks:
      - internal

networks:
  internal:
    internal: true
  reverse-proxy:
    external: true