---
vikunja_svc:
  domain: todo.serguzim.me
  name: vikunja
  port: 80
  caddy_extra: |
    handle /api/* {
      reverse_proxy vikunja-api:3456
    }
    handle /.well-known/* {
      reverse_proxy vikunja-api:3456
    }
    handle /dav/* {
      reverse_proxy vikunja-api:3456
    }
  db:
    host: "{{ postgres.host }}"
    port: "{{ postgres.port }}"
    database: vikunja
    user: "{{ vault_vikunja.db.user }}"
    pass: "{{ vault_vikunja.db.pass }}"

vikunja_yml:
  service:
    JWTSecret: "{{ vault_vikunja.jwt_secret }}"
    frontendurl: https://{{ svc.domain }}
    enableregistration: false
    timezone: "{{ timezone }}"

  database:
    type: postgres
    sslmode: verify-full
    host: "{{ svc.db.host }}"
    database: "{{ svc.db.database }}"
    user: "{{ svc.db.user }}"
    password: "{{ svc.db.pass }}"

  mailer:
    enabled: true
    host: "{{ mailer.host }}"
    port: "{{ mailer.port }}"
    username: "{{ vault_vikunja.mailer.user }}"
    password: "{{ vault_vikunja.mailer.pass }}"
    fromemail: "{{ vault_vikunja.mailer.user }}"

  auth:
    local:
      enabled: false
    openid:
      enabled: true
      providers:
        - name: auth.serguzim.me
          authurl: https://auth.serguzim.me/application/o/todo-serguzim-me/
          logouturl: https://auth.serguzim.me/application/o/todo-serguzim-me/end-session/
          clientid: "{{ vault_vikunja.oidc_client.id }}"
          clientsecret: "{{ vault_vikunja.oidc_client.secret }}"

  VIKUNJA_METRICS_ENABLED: true

vikunja_compose:
  watchtower: true
  image: vikunja/frontend
  file:
    services:
      api:
        image: vikunja/api
        restart: always
        volumes:
          - data:/app/vikunja/files
          - ./config.yml:/app/vikunja/config.yml
        networks:
          default:
          apps:
            aliases:
              - "{{ svc.name }}-api"
    volumes:
      data: