services:
  arch-users-api:
    container_name: arch-users-api
    hostname: arch-users-api
    image: gitea.triunnialabs.com/triunnialabs/arch-users-api:0.2.43
    entrypoint: ["/bin/sh", "-c", "cat /certs/my-company-root-ca.crt >> /etc/ssl/certs/ca-certificates.crt && exec dotnet TriunniaLabs.Arch.Api.Users.Server.dll"]
    ports:
      - "50005:8081"
    environment:
      - ASPNETCORE_HTTPS_PORTS=8081
      - ASPNETCORE_Kestrel__Certificates__Default__Path=/certs/my-arch-app-fullchain.pem
      - ASPNETCORE_Kestrel__Certificates__Default__KeyPath=/certs/my-arch-app.key.pem
      - Microservice__Name=
      - Microservice__EnvelopePassword=
      - Microservice__Application__Url=
      - Microservice__Application__ApplicationId=
      - Microservice__Application__ApiKey=
      - Microservice__Application__EnvelopePassword=
      - Microservice__ProtectedMemory__HmacSha512HashKey=
      - Microservice__ProtectedMemory__AesEncryptionPassword=
      - Microservice__ProtectedMemory__AesEncryptionSalt=
      - Microservice__ProtectedMemory__AesEncryptionIterations=
      - SqlServer__ConnectionString=
      - SqlServer__ReadOnlyConnectionString=
      - KeysApi__Url=
      - KeysApi__ApplicationId=
      - KeysApi__ApiKey=
      - KeysApi__EnvelopePassword=
      - TokensApi__Url=
      - TokensApi__ApplicationId=
      - TokensApi__ApiKey=
      - TokensApi__EnvelopePassword=
      - EmailApi__Url=
      - EmailApi__ApplicationId=
      - EmailApi__ApiKey=
      - EmailApi__EnvelopePassword=
      - UsersApi__AuthenticationScheme=MyArchApp
      - UsersApi__Email__ConfirmAccountDeleteTemplate=account-delete
      - UsersApi__Email__PasswordResetTemplate=password-reset
    volumes:
      - type: bind
        source: C:\MyArchApp\Apis\Users
        target: /opt/triunnialabs/arch/apis/users
      - type: bind
        source: C:\MyArchApp\my-arch-app-fullchain.pem
        target: /certs/my-arch-app-fullchain.pem
        read_only: true
      - type: bind
        source: C:\MyArchApp\my-arch-app.key.pem
        target: /certs/my-arch-app.key.pem
        read_only: true
      - type: bind
        source: C:\MyArchApp\my-company-root-ca.crt
        target: /certs/my-company-root-ca.crt
        read_only: true
    extra_hosts:
      - "host.docker.internal:host-gateway"