services:
  proxy:
    image: caddy:2
    env_file:
      - .env
    extra_hosts:
      - "auth.hublot.local:${HOST_IP}"
      - "admin-auth.hublot.local:${HOST_IP}"
      - "app.hublot.local:${HOST_IP}"
      - "livekit.hublot.local:${HOST_IP}"
    ports:
      - "443:443"
      - "80:80"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - ./certs:/certs:ro
      - ./caddy/data:/data
      - ./caddy/config:/config
    depends_on:
      - hublot

  hublot:
    image: forge.hublot.cloud/hublot/hublot-community:latest
    env_file:
      - .env
    extra_hosts:
      - "auth.hublot.local:${HOST_IP}"
      - "app.hublot.local:${HOST_IP}"
      - "livekit.hublot.local:${HOST_IP}"
    environment:
      NODE_TLS_REJECT_UNAUTHORIZED: "0"
      LOG_LEVEL: "trace"
      PORT: "3000"
      ROOT_URL: "https://app.hublot.local"
      MONGO_URL: "mongodb://mongo:27017"
      MONGO_DB_NAME: "hublot"
      LIVEKIT_API_HOST: "https://livekit.hublot.local"
      LIVEKIT_API_KEY: "devkey"
      LIVEKIT_API_SECRET: "devsecret"
      MINIO_ACCESS_KEY: "minio"
      MINIO_SECRET_KEY: "minio123456"
      MINIO_ENDPOINT: "minio"
      MINIO_PORT: "9000"
      MINIO_USE_SSL: "false"
      OIDC_DISCOVERY_URL: "http://auth.hublot.local/oidc/.well-known/openid-configuration"
      OIDC_APP_ID: "qs2705sv966er3q0fase8"
      OIDC_APP_SECRET: "JC3BIxZLMZbAwVwpk2XkNngdSOy2dn87"
      BFF_STATE_SECRET: "A_SECRET_TOKEN_KEY"
      BFF_JWT_SECRET: "A_SECRET_TOKEN_KEY"
    depends_on:
      - mongo
      - minio

  livekit:
    image: livekit/livekit-server:latest
    volumes:
      - ./livekit.yaml.tmpl:/etc/livekit.yaml.tmpl:ro
    entrypoint: ["/bin/sh", "-lc"]
    command:
      [
        'set -eu; sed "s/__HOST_IP__/${HOST_IP}/g" /etc/livekit.yaml.tmpl > /etc/livekit.yaml; /livekit-server --config /etc/livekit.yaml',
      ]
    env_file:
      - .env
    ports:
      - "7880:7880/tcp"
      - "7881:7881/udp"
      - "50000-50100:50000-50100/udp"

  mongo:
    image: mongo:7
    volumes:
      - ./mongo:/data/db

  minio:
    image: minio/minio:latest
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: "minio"
      MINIO_ROOT_PASSWORD: "minio123456"
    volumes:
      - ./minio:/data

  logto:
    image: svhd/logto:latest
    # entrypoint: ["sh", "-c", "npm run cli db seed -- --swe && npm start"]
    restart: unless-stopped
    depends_on:
      - logto-db
    environment:
      NODE_TLS_REJECT_UNAUTHORIZED: "0"
      TRUST_PROXY_HEADER: "1"
      DB_URL: "postgres://logto:logto@logto-db:5432/logto"
      ENDPOINT: "https://auth.hublot.local"
      ADMIN_ENDPOINT: "https://auth-admin.hublot.local "
      LOGTO_COOKIE_SECRET: '5tqYp7gNnS8mJ3uKkZx2vXqHcEw6D9rB"'

  logto-db:
    image: postgres:15
    environment:
      POSTGRES_HOST_AUTH_METHOD: "trust"
    volumes:
      - ./logto/db:/var/lib/postgresql/data
      - ./logto/init:/docker-entrypoint-initdb.d:ro