services:
  openproject:
    image: openproject/openproject:15
    container_name: openproject
    restart: unless-stopped

    ports:
      - "80:80"

    environment:
      OPENPROJECT_SECRET_KEY_BASE: I-want-to-be-a-millionare-919!<3
      OPENPROJECT_HOST__NAME: tasks.kitestacks.com
      OPENPROJECT_HTTPS: "false"
      # Authentik OIDC — fill OPENPROJECT_OIDC_SECRET in .env after creating the Authentik app
      OPENPROJECT_OPENID__CONNECT_PROVIDERS_AUTHENTIK_HOST: "auth.kitestacks.com"
      OPENPROJECT_OPENID__CONNECT_PROVIDERS_AUTHENTIK_IDENTIFIER: "openproject"
      OPENPROJECT_OPENID__CONNECT_PROVIDERS_AUTHENTIK_SECRET: "${OPENPROJECT_OIDC_SECRET}"
      OPENPROJECT_OPENID__CONNECT_PROVIDERS_AUTHENTIK_DISPLAY__NAME: "Authentik"
      OPENPROJECT_OPENID__CONNECT_PROVIDERS_AUTHENTIK_SCOPE: '["openid","email","profile"]'
      OPENPROJECT_OPENID__CONNECT_PROVIDERS_AUTHENTIK_DISCOVERY__ENDPOINT: "https://auth.kitestacks.com/application/o/openproject/.well-known/openid-configuration"

    volumes:
      - /home/kenpat/openproject-docker-data:/var/openproject/pgdata
      - openproject_assets:/var/openproject/assets

    networks:
      - default
      - kitestacks

volumes:
  openproject_assets:

networks:
  kitestacks:
    external: true