---
secrets:
  JWT_SECRET:
    file: '${SECRETS_PATH}/jwt_sec'
  SESSION_SECRET:
    file: '${SECRETS_PATH}/ses_sec'
  STORAGE_ENCRYPTION_KEY:
    file: '${SECRETS_PATH}/enc_key'
  SMTP_PASSWORD:
    file: '${SECRETS_PATH}/smtp_pass'

services:
  redis:
    container_name: 'authelia-redis'
    image: redis:alpine
    command: redis-server --save 60 1 --loglevel warning
    pull_policy: always
    restart: unless-stopped
    networks:
      authelia_server_network:
        aliases: []
    volumes:
      - ${REDIS_PATH}:/data
    user: ${PUID}:${PGID}
  authelia:
    container_name: 'authelia'
    image: authelia/authelia
    pull_policy: always
    restart: unless-stopped
    networks:
      authelia_server_network:
        aliases: []
    ports:
      - '127.0.0.1:9091:9091'
    secrets:
      - 'JWT_SECRET'
      - 'SESSION_SECRET'
      - 'STORAGE_ENCRYPTION_KEY'
      - 'SMTP_PASSWORD'
    environment:
      AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: '/run/secrets/JWT_SECRET'
      AUTHELIA_SESSION_SECRET_FILE: '/run/secrets/SESSION_SECRET'
      AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: '/run/secrets/STORAGE_ENCRYPTION_KEY'
      AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE: '/run/secrets/SMTP_PASSWORD'
      PUID: ${PUID}
      PGID: ${PGID}
    volumes:
      - ${VOLUME_PATH}:/config

networks:
  authelia_server_network:
    external: true
    name: 'authelia_server_network'