services:
  oidc-test:
    build:
      context: .
      dockerfile: ./misc/docker/Dockerfile
    environment:
      - LOG_LEVEL=0
      - HTTP_ADDRESS=0.0.0.0:8000
      - OIDC_CLIENT_ID=oidc-test
      - OIDC_CLIENT_SECRET=oidc-test-123456
      - OIDC_ISSUER_URL=http://localhost:8081/
      - OIDC_REDIRECT_URL=http://localhost:8000/oauth2/callback
      - OIDC_POST_LOGOUT_REDIRECT_URL=http://localhost:8000
    depends_on:
      hydra:
        condition: service_healthy
    network_mode: host
    restart: unless-stopped

  hydra:
    build:
      context: ./misc/compose/hydra
      args:
        - HTTP_PROXY=${HTTP_PROXY:-}
        - HTTPS_PROXY=${HTTPS_PROXY:-}
        - http_proxy=${http_proxy:-}
        - https_proxy=${https_proxy:-}
    volumes:
      - ./misc/compose/hydra/config.yml:/etc/hydra/config.yml
      - ./misc/compose/hydra/clients.d:/etc/hydra/clients.d
    environment:
      - LOG_LEAK_SENSITIVE_VALUES=true
    links:
      - mariadb
    depends_on:
      - mariadb
    ports:
      - 8081:4444
    healthcheck:
      test:
        [
          "CMD",
          "wget",
          "--spider",
          "-q",
          "http://127.0.0.1:4444/.well-known/openid-configuration",
        ]
      interval: 10s
      timeout: 10s
      retries: 3
      start_period: 10s
    restart: unless-stopped

  mariadb:
    image: mariadb:10.2
    environment:
      MYSQL_DATABASE: hydra
      MYSQL_USER: hydra
      MYSQL_PASSWORD: hydra
      MYSQL_ROOT_PASSWORD: hydra
      TZ: Europe/Paris
    volumes:
      - ./misc/compose/mariadb/init-db.d:/docker-entrypoint-initdb.d/:ro
      - mariadb_data:/var/lib/mysql
      - /etc/localtime:/etc/localtime:ro

  glauth:
    build:
      context: ./misc/compose/glauth
      args:
        - HTTP_PROXY=${HTTP_PROXY:-}
        - HTTPS_PROXY=${HTTPS_PROXY:-}
        - http_proxy=${http_proxy:-}
        - https_proxy=${https_proxy:-}
    ports:
      - 389:389

  hydra-werther:
    image: icoreru/werther:v1.2.1
    environment:
      - WERTHER_LDAP_BASEDN=ou=users,dc=example,dc=com
      - WERTHER_LDAP_ROLE_BASEDN=ou=groups,dc=example,dc=com
      - WERTHER_DEV_MODE=True
      - WERTHER_LISTEN=0.0.0.0:8080
      - WERTHER_IDENTP_HYDRA_URL=http://hydra:4445
      - WERTHER_LDAP_ENDPOINTS=glauth:389
      - WERTHER_LDAP_BINDDN=cn=admin,dc=example,dc=com
      - WERTHER_LDAP_BINDPW=admin
    volumes:
      - ./misc/glauth/glauth.cfg:/app/config/config.cfg:ro
    links:
      - glauth
      - hydra
    ports:
      - 8082:8080

volumes:
  mariadb_data: