services:
  alloy:
    image: ghcr.io/atareao/alloy:latest
    container_name: alloy
    restart: unless-stopped
    ports:
      - "${PORT:-3066}:3066"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./data:/app/data
    environment:
      - PORT=${PORT:-3066}
      - HOST=${HOST:-0.0.0.0}
      - OIDC_ISSUER_URL=${OIDC_ISSUER_URL:?OIDC_ISSUER_URL is required}
      - OIDC_CLIENT_ID=${OIDC_CLIENT_ID:?OIDC_CLIENT_ID is required}
      - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET:?OIDC_CLIENT_SECRET is required}
      - OIDC_REDIRECT_URL=${OIDC_REDIRECT_URL:?OIDC_REDIRECT_URL is required}
      - TIMEZONE=${TIMEZONE:-UTC}
      - RUST_LOG=${RUST_LOG:-info}
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.alloy.rule=Host(`alloy.tudominio.com`)"
      - "traefik.http.services.alloy.loadbalancer.server.port=3066"