services:
  outline:
    image: outlinewiki/outline:latest
    environment:
    - PGSSLMODE=disable
    - SECRET_KEY=2821b95392ba4ead8acb1882653eb217545ee267099608dee92ecde2cf9a7323
    - UTILS_SECRET=cd5dab7c54b92603ba44bcab8a49e5a0f816b11a5b75ef25fe73ebb13633cae4
    - DATABASE_URL=postgres://admin:AllOfTheStars%2B1@10.0.4.10:5432/outline
    - REDIS_URL=redis://redis:6379
    - URL=https://flow.frostlabs.me
    - TZ=America/New_York
    - PORT=3000
    - FILE_STORAGE=local
    - FILE_STORAGE_LOCAL_ROOT_DIR=/var/lib/outline/data
    - FILE_STORAGE_UPLOAD_MAX_SIZE=26214400
    # OIDC/SSO Configuration for Authentik
    - OIDC_CLIENT_ID=9zCd8wzJFBv3oRYmdJXKWVokI0P3dx0HhuJB2yST
    - OIDC_CLIENT_SECRET=fQpA7KFeDO2x8HKcQ5lOKFvB4HqyXcUvwUpow20bIOUBEZqoZ5hekkYS2kJ7BR2XayrOevq1sd4cC7Nw3mO1xz2jFXw0CiuhfNQTdMF35Zz2IXKbsNvVHU0Z1hYFjhlG
    - OIDC_AUTH_URI=https://auth.frostlabs.me/application/o/authorize/
    - OIDC_TOKEN_URI=https://auth.frostlabs.me/application/o/token/
    - OIDC_USERINFO_URI=https://auth.frostlabs.me/application/o/userinfo/
    - OIDC_LOGOUT_URI=https://auth.frostlabs.me/application/o/outline/end-session/
    - OIDC_USERNAME_CLAIM=preferred_username
    - OIDC_DISPLAY_NAME=Authentik
    - OIDC_SCOPES=openid profile email
    volumes:
    - /home/doc/projects/swarm-data/appdata/outline/data:/var/lib/outline/data
    networks:
    - homelab
    deploy:
      replicas: 1
      restart_policy:
        condition: any
      resources:
        limits:
          memory: 1G
          cpus: '1.0'
        reservations:
          memory: 512M
      labels:
      - "traefik.enable=true"
      - "traefik.swarm.network=homelab"
      # Public-facing domain with Let's Encrypt certificate
      - "traefik.http.routers.outline.rule=Host(`flow.frostlabs.me`)"
      - "traefik.http.routers.outline.entrypoints=websecure"
      - "traefik.http.routers.outline.tls=true"
      - "traefik.http.routers.outline.tls.certresolver=cloudflare"
      - "traefik.http.services.outline.loadbalancer.server.port=3000"
    depends_on:
    - redis

  redis:
    image: redis:7-alpine
    volumes:
    - /home/doc/projects/swarm-data/appdata/outline/redis:/data
    networks:
    - homelab
    deploy:
      replicas: 1
      placement:
        constraints:
        - node.hostname == p0
      restart_policy:
        condition: on-failure
        delay: 5s
      resources:
        limits:
          memory: 256M
        reservations:
          memory: 128M
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
      interval: 10s
      timeout: 3s
      retries: 3

networks:
  homelab:
    external: true
  outline_internal:
    driver: overlay
    attachable: true