services:
  satosa:
    environment:
      - "METADATA_DIR=/etc/satosa/metadata"
      - "WORKER_TIMEOUT=120"
    dns:
      - "89.32.32.32"
    image: "<%= @image %><% if @tag %>:<%= @tag %><% end %>"
    pull_policy: "always"
    ports:
      - "443:8000"
    volumes:
      - "/etc/satosa:/etc/satosa"
      - "/etc/dehydrated:/etc/dehydrated"
<% if @dehydrated_status == "present" -%>
  alwayshttps:
    environment:
      - "ACME_URL=http://acme-c.sunet.se"
    dns:
      - "89.32.32.32"
    image: "docker.sunet.se/always-https"
    pull_policy: "always"
    ports:
      - "80:80"
<% end -%>