version: "3.8"

services:
  vouch:
    image: quay.io/vouch/vouch-proxy:latest
    container_name: vouch
    restart: unless-stopped
    environment: # check https://github.com/vouch/vouch-proxy/blob/master/config/config.yml_example
      VOUCH_LOGLEVEL: "debug"
      testing: "true"
      VOUCH_PORT: 9090
      VOUCH_LISTEN: 0.0.0.0
      OUCH_WRITETIMEOUT: 15
      VOUCH_READTIMEOUT: 15
      VOUCH_IDLETIMEOUT: 15
      VOUCH_JWT_MAXAGE: 240
      VOUCH_COOKIE_MAXAGE: 240
      VOUCH_JWT_COMPRESS: "true" 
      VOUCH_SESSION_MAXAGE: 5
      OAUTH_PROVIDER: "github"
      OAUTH_CLIENT_ID: "4d20be08dd7550eddd8f"
      OAUTH_CLIENT_SECRET: "7319a4668cd29be8b32c2e39c30132fe2a649633"
      VOUCH_WHITELIST: "zino1337"
      VOUCH_ALLOWALLUSERS: "false"
      VOUCH_PUBLICACCESS: "false"
      VOUCH_JWT_ISSUER: "Vouch"
      VOUCH_COOKIE_NAME: "VouchCookie"
      VOUCH_SESSION_NAME: "VouchSession"
      VOUCH_COOKIE_DOMAIN: "zinomedia.de"
      VOUCH_COOKIE_HTTPONLY: "false"
      VOUCH_COOKIE_SAMESITE: "lax"
      VOUCH_COOKIE_SECURE: "false"
      #VOUCH_JWT_SECRET: "pwn9T54wwhV6XMZ2sNwPgRXboR6KXgVSxcou9oA8Yqe5"
      VOUCH_DOMAINS: "zinomedia.de"
    networks:
      - web

networks:
  web:
    external: true
    name: web