---
services:
  passwordpusher:
    image: docker.io/pglombardo/pwpush:stable
    container_name: passwordpusher
    restart: unless-stopped
    platform: linux/amd64

    ports:
      - "5100:5100"

    env_file:
      - .env.runtime

    environment:
      TZ: Europe/Paris

      # URL publique via Caddy
      PWP__HOST_DOMAIN: passwordpusher.thomasmlg.fr
      PWP__HOST_PROTOCOL: https
      PWP__OVERRIDE_BASE_URL: https://passwordpusher.thomasmlg.fr
      PWP__ALLOWED_HOSTS: "passwordpusher.thomasmlg.fr passwordpusher.thomasmlg.fr:443 10.100.5.104 10.100.5.104:5100 localhost localhost:5100"

      # Cookies securises car l acces public passe par HTTPS via Caddy
      PWP__SECURE_COOKIES: "true"

      # Pas d acces anonyme
      PWP__ALLOW_ANONYMOUS: "false"

      # Phase initiale: inscriptions ouvertes pour creer ton compte
      # Apres creation du compte, passer PWP__DISABLE_SIGNUPS a "true"
      PWP__DISABLE_SIGNUPS: "false"
      PWP__DISABLE_LOGINS: "false"
      PWP__ENABLE_USER_ACCOUNT_EMAILS: "true"

      # SMTP non sensible
      PWP__MAIL__RAISE_DELIVERY_ERRORS: "true"
      PWP__MAIL__SMTP_ADDRESS: ssl0.ovh.net
      PWP__MAIL__SMTP_DOMAIN: thomasmlg.fr
      PWP__MAIL__SMTP_PORT: "587"
      PWP__MAIL__SMTP_AUTHENTICATION: plain
      PWP__MAIL__SMTP_ENABLE_STARTTLS_AUTO: "true"
      PWP__MAIL__SMTP_OPEN_TIMEOUT: "10"
      PWP__MAIL__SMTP_READ_TIMEOUT: "10"
      PWP__MAIL__MAILER_SENDER: passwordpusher@thomasmlg.fr

      # Fonctionnalites
      PWP__ENABLE_URL_PUSHES: "true"
      PWP__ENABLE_FILE_PUSHES: "false"
      PWP__ENABLE_QR_PUSHES: "true"
      
      # Branding
      PWP__BRAND__TITLE: "Thomas MALGOUYRES"
      PWP__BRAND__TAGLINE: "Partage securisé de mots de passe"
      PWP__BRAND__DISCLAIMER: "Instance privée reservée a un usage personnel."
      PWP__BRAND__SHOW_FOOTER_MENU: "false"

      # Theme
      PWP__THEME: darkly

      # Securite et confidentialite
      PWP__NOINDEX: "true"
      PWP__SHOW_VERSION: "false"
      PWP__THROTTLING__MINUTE: "60"
      PWP__THROTTLING__SECOND: "10"

      # Interface et logs
      PWP__DEFAULT_LOCALE: fr
      PWP__LOG_LEVEL: warn
      PWP__LOG_TO_STDOUT: "true"
    volumes:
      - pwpush-storage:/opt/PasswordPusher/storage

    healthcheck:
      test: ["CMD-SHELL", "curl -f -H 'Host: passwordpusher.thomasmlg.fr' || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

volumes:
  pwpush-storage:
    name: passwordpusher-storage
    driver: local