name: planka-v2
services:
  planka:
    image: ghcr.io/plankanban/planka:2.0.0-rc.4
    restart: on-failure
    volumes:
      - favicons:/app/public/favicons
      - user-avatars:/app/public/user-avatars
      - background-images:/app/public/background-images
      - attachments:/app/private/attachments
#    ports:
#      - 30230:1337
    networks:
      - central_dogma
      - default

    # TO JEST KLUCZ DO ROZWIĄZANIA PROBLEMU "ENOTFOUND"
    extra_hosts:
      - "auth.archvium.eu:host-gateway"

    environment:
      - BASE_URL=http://planka.archvium.eu:30230
      - DATABASE_URL=postgresql://postgres@postgres/planka
      - SECRET_KEY=secret
      - TRUST_PROXY=true
      
      # Wyłączenie sprawdzania certyfikatu (ważne przy self-hosted)
      - NODE_TLS_REJECT_UNAUTHORIZED=0 

      # KONFIGURACJA AUTHENTIK OIDC
      - OIDC_ISSUER=http://auth.archvium.eu:30230/application/o/planka/
      - OIDC_CLIENT_ID=bSZdVk9TuhMXlpp5uy08zyZ0eUEfYP4M6p2yIXjC
      - OIDC_CLIENT_SECRET=HqjwnU2oURfUo2VXFSZk9moPqRjYrxDjU2XnM8L4gH9NxpO82VUbtomg4vMGyAOPHrKbdGl5ARA2xPddCIYeSaaTkqhUpwVsvs26KktIxv9Y6PjQRClPMpKM6RryrmXL
      
      # Standardowe ustawienia mapowania
      - OIDC_SCOPES=openid email profile
      - OIDC_ADMIN_ROLES=admin
      - OIDC_EMAIL_ATTRIBUTE=email
      - OIDC_NAME_ATTRIBUTE=name
      - OIDC_USERNAME_ATTRIBUTE=preferred_username
      - OIDC_ROLES_ATTRIBUTE=groups
      - OIDC_IGNORE_USERNAME=true
      
      # Na razie false, żebyś mógł się zalogować jak coś nie zadziała
      - OIDC_ENFORCED=false

    depends_on:
      postgres:
        condition: service_healthy

  postgres:
    image: postgres:16-alpine
    restart: on-failure
    volumes:
      - db-data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=planka
      - POSTGRES_HOST_AUTH_METHOD=scram-sha-256
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d planka"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  favicons:
    external: true
    name: planka_favicons
  user-avatars:
    external: true
    name: planka_user-avatars
  background-images:
    external: true
    name: planka_background-images
  attachments:
    external: true
    name: planka_attachments
  db-data:
    external: true
    name: planka_db-data

networks:
  central_dogma:
    external: true