version: '3.4'
services:
  backend:
    image: registry.gitlab.com/sahkoinsinoorikilta/vtmk/web2.0-backend:latest
    deploy:
      replicas: 1
      update_config:
        order: start-first
    depends_on:
      - db
    ports:
      - 8000:8000
    volumes:
      - type: bind
        source: /home/sik/datadrive/production/files/static/.hidden/django/media
        target: /app/media
      - type: bind
        source: /home/sik/datadrive/production/files/static/.hidden/django/static
        target: /app/static
      - type: bind
        source: /home/sik/datadrive/production/files/static/.hidden/django/collected_static
        target: /app/collected_static

    environment:
      - DEPLOY_ENV=production
      - SENTRY_DSN=https://a27d887d075f4380a48139b11955deaa@o1039142.ingest.sentry.io/6060507
      - HOST=api.sahkoinsinoorikilta.fi
      - FRONTEND_URL=sahkoinsinoorikilta.fi
      - DB_NAME=sik
      - DB_USER=sik
      - DB_HOST=managed-db.postgres.database.azure.com
      - DB_PORT=5432
      - DB_SSL=True
      - SECRET_KEY_FILE=/run/secrets/BACKEND_SECRET_KEY
      - DB_PASSWD_FILE=/run/secrets/BACKEND_DB_PASSWD
      - EMAIL_API_KEY_FILE=/run/secrets/BACKEND_EMAIL_API_KEY
      - G_PRIVATE_KEY_ID_FILE=/run/secrets/BACKEND_G_PRIVATE_KEY_ID
      - G_PRIVATE_KEY_FILE=/run/secrets/BACKEND_G_PRIVATE_KEY
      - G_CLIENT_EMAIL_FILE=/run/secrets/BACKEND_G_CLIENT_EMAIL
      - G_CLIENT_ID_FILE=/run/secrets/BACKEND_G_CLIENT_ID
      - G_CLIENT_URL_FILE=/run/secrets/BACKEND_G_CLIENT_URL
      - GROUP_KEY_FILE=/run/secrets/BACKEND_GROUP_KEY

    secrets:
      - BACKEND_SECRET_KEY
      - BACKEND_DB_PASSWD
      - BACKEND_EMAIL_API_KEY
      - BACKEND_G_PRIVATE_KEY_ID
      - BACKEND_G_PRIVATE_KEY
      - BACKEND_G_CLIENT_EMAIL
      - BACKEND_G_CLIENT_ID
      - BACKEND_G_CLIENT_URL
      - BACKEND_GROUP_KEY

secrets:
  BACKEND_SECRET_KEY:
    external: true
  BACKEND_DB_PASSWD:
    external: true
  BACKEND_EMAIL_API_KEY:
    external: true
  BACKEND_G_PRIVATE_KEY_ID:
    external: true
  BACKEND_G_PRIVATE_KEY:
    external: true
  BACKEND_G_CLIENT_EMAIL:
    external: true
  BACKEND_G_CLIENT_ID:
    external: true
  BACKEND_G_CLIENT_URL:
    external: true
  BACKEND_GROUP_KEY:
    external: true