---
tinytinyrss_svc:
  domain: rss.serguzim.me
  name: tinytinyrss
  port: 80
  db:
    host: "{{ postgres.host }}"
    port: "{{ postgres.port }}"
    database: tinytinyrss
    user: "{{ opentofu.postgresql_service_roles.tinytinyrss.name }}"
    pass: "{{ opentofu.postgresql_service_roles.tinytinyrss.password }}"

tinytinyrss_env:
  TTRSS_DB_TYPE: pgsql
  TTRSS_DB_HOST: "{{ svc.db.host }}"
  TTRSS_DB_NAME: "{{ svc.db.database }}"
  TTRSS_DB_USER: "{{ svc.db.user }}"
  TTRSS_DB_PASS: "{{ svc.db.pass }}"

  TTRSS_SELF_URL_PATH: https://{{ svc.domain }}/tt-rss/

  APP_UPSTREAM: tt-rss

  # Workaround for this bug:
  # could not open certificate file "/root/.postgresql/postgresql.crt": Permission denied
  PGSSLCERT: /tmp/postgresql.crt

tinytinyrss_compose:
  watchtower: false
  image: cthulhoo/ttrss-web-nginx
  volumes:
    - app:/var/www/html:ro
  file:
    services:
      app:
        depends_on:
          - tt-rss
      tt-rss:
        image: cthulhoo/ttrss-fpm-pgsql-static
        restart: always
        env_file:
          - service.env
        volumes:
          - app:/var/www/html
        networks:
          default:
      updater:
        image: cthulhoo/ttrss-fpm-pgsql-static
        restart: always
        env_file:
          - service.env
        volumes:
          - app:/var/www/html
        depends_on:
          - tt-rss
        command: /opt/tt-rss/updater.sh
        networks:
          default:
    volumes:
      app: