services:
  arch-tokens-api:
    container_name: arch-tokens-api
    hostname: arch-tokens-api
    image: gitea.triunnialabs.com/triunnialabs/arch-tokens-api:0.3.0
    entrypoint: ["/bin/sh", "-c", "cat /certs/my-company-root-ca.crt >> /etc/ssl/certs/ca-certificates.crt && exec dotnet TriunniaLabs.Arch.Api.Tokens.Server.dll"]
    ports:
      - "50003:8081"
    environment:
      - ASPNETCORE_HTTPS_PORTS=8081
      - ASPNETCORE_Kestrel__Certificates__Default__Path=/certs/my-arch-app-fullchain.pem
      - ASPNETCORE_Kestrel__Certificates__Default__KeyPath=/certs/my-arch-app.key.pem
     - Microservice__Name=
      - Microservice__EnvelopePassword=
      - Microservice__Application__Url=
      - Microservice__Application__ApplicationId=
      - Microservice__Application__ApiKey=
      - Microservice__Application__EnvelopePassword=
      - Microservice__ProtectedMemory__HmacSha512HashKey=
      - Microservice__ProtectedMemory__AesEncryptionPassword=
      - Microservice__ProtectedMemory__AesEncryptionSalt=
      - Microservice__ProtectedMemory__AesEncryptionIterations=
      - SqlServer__ConnectionString=
      - SqlServer__ReadOnlyConnectionString=
    volumes:
      - type: bind
        source: C:\MyArchApp\Apis\Tokens
        target: /opt/triunnialabs/arch/apis/tokens
      - type: bind
        source: C:\MyArchApp\my-arch-app-fullchain.pem
        target: /certs/my-arch-app-fullchain.pem
        read_only: true
      - type: bind
        source: C:\MyArchApp\my-arch-app.key.pem
        target: /certs/my-arch-app.key.pem
        read_only: true
      - type: bind
        source: C:\MyArchApp\my-company-root-ca.crt
        target: /certs/my-company-root-ca.crt
        read_only: true
    extra_hosts:
      - "host.docker.internal:host-gateway"