version: "3.8"

services:
  gwoe-antragspruefer:
    build: .
    container_name: gwoe-antragspruefer
    restart: unless-stopped
    environment:
      - DASHSCOPE_API_KEY=${DASHSCOPE_API_KEY}
      - KEYCLOAK_URL=https://sso.toppyr.de
      - KEYCLOAK_REALM=collaboration
      - KEYCLOAK_CLIENT_ID=gwoe-antragspruefer
    volumes:
      - ./data:/app/data
      - ./reports:/app/reports
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.gwoe.rule=Host(`gwoe.toppyr.de`)"
      - "traefik.http.routers.gwoe.entrypoints=websecure"
      - "traefik.http.routers.gwoe.tls=true"
      - "traefik.http.routers.gwoe.tls.certresolver=letsencrypt"
      - "traefik.http.services.gwoe.loadbalancer.server.port=8000"
    networks:
      - collaboration_collaboration

  # Doku-Hosting via caddy-gitea-pages (#62 Phase 2).
  # Liest automatisch aus dem gh-pages-Branch. mkdocs build → git push
  # origin gh-pages → Seite live unter gwoe-docs.toppyr.de.
  gwoe-docs:
    image: ghcr.io/d7z-project/caddy-gitea-pages:nightly
    container_name: gwoe-docs
    restart: unless-stopped
    environment:
      - GITEA_SERVER=https://repo.toppyr.de
      - GITEA_TOKEN=${GITEA_TOKEN}
    volumes:
      - ./Caddyfile.docs:/etc/caddy/Caddyfile:ro
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.gwoe-docs.rule=Host(`gwoe-docs.toppyr.de`)"
      - "traefik.http.routers.gwoe-docs.entrypoints=websecure"
      - "traefik.http.routers.gwoe-docs.tls=true"
      - "traefik.http.routers.gwoe-docs.tls.certresolver=letsencrypt"
      - "traefik.http.services.gwoe-docs.loadbalancer.server.port=80"
    networks:
      - collaboration_collaboration

networks:
  collaboration_collaboration:
    external: true