services:
  mine-linkwarden-db:
    container_name: mine-linkwarden-db
    image: postgres:16-alpine
#    env_file: .env
    restart: always
    environment:
      - TZ=America/New_York
      - POSTGRES_PASSWORD=postgres
      - POSTGRES_USER=postgres
      - POSTGRES_DB=postgres
    volumes:
      - /home/user/containerdata/linkwarden/pgdata:/var/lib/postgresql/data
    networks: 
      - linkwarden-nw
      
  mine-linkwarden:
    container_name: mine-linkwarden
#    env_file: .env
    environment:
      - DATABASE_URL=postgresql://postgres:postgres@mine-linkwarden-db:5432/postgres
      - TZ=America/New_York
#   ENTER PASSWORD
      - NEXTAUTH_SECRET=changeme
#   ENTER URL https://linkwarden.*.*.net/api/v1/auth
      - NEXT_PUBLIC_AUTHENTIK_ENABLED=true
      - AUTHENTIK_CUSTOM_NAME=NCBC_IDP # Optionally set a custom provider name. Will be displayed on the login page
      - AUTHENTIK_ISSUER=https://sso-070.newcovbap.church/application/o/linkwarden
      - AUTHENTIK_CLIENT_ID=TvQhrtFY23xUv92uE1VVa9DNCdIq3nMpdTN1o015
      - AUTHENTIK_CLIENT_SECRET=a9rWyuNdlK2ND55aNFXztw0lZ8DWhIidz25VdHA2bJpePIv2WpzXwJ8Rif7F0yMSIJnmgutPMcIqENqPDi6rExNiWGAtpTiS6dgl558hUsX7giVhA7BjLro3SRq0BbVQ

#      - NEXTAUTH_URL=https://linkwarden.newcovbap.church/api/v1/auth
#      - OIDC_ENABLED=true
#      - OIDC_CLIENT_ID=TvQhrtFY23xUv92uE1VVa9DNCdIq3nMpdTN1o015
#      - OIDC_CLIENT_SECRET=a9rWyuNdlK2ND55aNFXztw0lZ8DWhIidz25VdHA2bJpePIv2WpzXwJ8Rif7F0yMSIJnmgutPMcIqENqPDi6rExNiWGAtpTiS6dgl558hUsX7giVhA7BjLro3SRq0BbVQ
#      - OIDC_ISSUER_URL=https://sso-070.newcovbap.church/application/o/linkwarden/ # Adjust as needed
#      - OIDC_REDIRECT_URI=https://linkwarden.newcovbap.church/auth/sso/callback
      
    restart: always
    # build: . # uncomment this line to build from source
    image: ghcr.io/linkwarden/linkwarden:latest # comment this line to build from source
    ports:
      - 21302:3000
    volumes:
      - /home/user/containerdata/linkwarden/linkwarden/data:/data/data

    depends_on:
      - mine-linkwarden-db
    networks: 
      - linkwarden-nw

networks:
    linkwarden-nw: