services:
  app:
    build: .
    ports:
      - "7842:7842"
    volumes:
      - data:/app/data
      - /mnt/user/noah/images/icons:/icons
    restart: unless-stopped
    environment:
      - NODE_ENV=production
      - PORT=7842
      - DB_PATH=/app/data/budget.json
      - APP_BASE_URL=${APP_BASE_URL:-}
      - AUTH_SESSION_SECRET=${AUTH_SESSION_SECRET:-}
      - SETUP_TOKEN=${SETUP_TOKEN:-}
      - OIDC_ISSUER=${OIDC_ISSUER:-}
      - OIDC_CLIENT_ID=${OIDC_CLIENT_ID:-}
      - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET:-}
      - OIDC_REDIRECT_URI=${OIDC_REDIRECT_URI:-}
      - OIDC_SCOPE=${OIDC_SCOPE:-openid profile email groups}
      - OIDC_ALLOWED_GROUPS=${OIDC_ALLOWED_GROUPS:-}
      - OIDC_ALLOWED_EMAILS=${OIDC_ALLOWED_EMAILS:-}
      - OIDC_ALLOWED_DOMAINS=${OIDC_ALLOWED_DOMAINS:-}
    labels:
      net.unraid.docker.webui: "http://[IP]:[PORT:7842]"
      net.unraid.docker.icon: "/mnt/user/noah/images/icons/enkelbudget.png"
      net.unraid.docker.managed: "true"

volumes:
  data: