name: authentication

services:
  authelia:
    image: authelia/authelia
    environment:
      NASCOMPOSE_TRAEFIK_DOMAINS: ${NASCOMPOSE_TRAEFIK_DOMAINS?}
      AUTHELIA_DEFAULT_REDIRECTION_URL: "" #Heimdall
      AUTHELIA_JWT_SECRET_FILE: /run/secrets/jwt_secret
      X_AUTHELIA_CONFIG: /etc/authelia/configuration.yml,/etc/authelia/access.yml,/etc/authelia/authentication.yml
    networks:
      - traefik
    volumes:
      - config:/config
    configs:
      - source: authelia_configuration
        target: /etc/authelia/configuration.yml
      - source: authelia_access
        target: /etc/authelia/access.yml
      - source: authelia_authentication
        target: /etc/authelia/authentication.yml
    secrets:
      - jwt_secret
    labels:
      traefik.enable: true

networks:
  traefik:
    external: true

volumes:
  config:

configs:
  authelia_configuration:
    file: ${NASCOMPOSE_SERVICES?}/configs/authelia/configuration.yml
  authelia_access:
    file: ${NASCOMPOSE_SERVICES?}/configs/authelia/access.yml
  authelia_authentication:
    file: ${NASCOMPOSE_SERVICES?}/configs/authelia/authentication.yml

secrets:
  jwt_secret:
    file: ${NASCOMPOSE_SERVICES?}/secrets/authelia/jwt_secret