services:
  always-https:
    container_name: always-https
    image: docker.sunet.se/always-https
    restart: always
    ports:
      - 80:80
    environment:
      - ACME_URL=http://acme-c.sunet.se/

  backend:
    container_name: backend
    image: ghcr.io/intuitem/ciso-assistant-enterprise-backend:latest
    restart: always
    environment:
      - ALLOWED_HOSTS=backend,cisoas.sunet.se
      - CISO_ASSISTANT_URL=https://cisoas.sunet.se:8443
      - DJANGO_DEBUG=True
      - AUTH_TOKEN_TTL=7200
    volumes:
      - ./db:/code/db
      - /etc/dehydrated/certs/cisoas-sto4-prod-1.sunet.se:/certs

  frontend:
    container_name: frontend
    restart: always
    environment:
      - PUBLIC_BACKEND_API_URL=http://backend:8000/api
      - PROTOCOL_HEADER=x-forwarded-proto
      - HOST_HEADER=x-forwarded-host

    image: ghcr.io/intuitem/ciso-assistant-enterprise-frontend:latest
    depends_on:
      - backend
    volumes:
      - /etc/dehydrated/certs/cisoas-sto4-prod-1.sunet.se:/certs

  caddy:
    container_name: caddy
    image: caddy:2.8.4
    depends_on:
      - frontend
    restart: always
    ports:
      - 8443:8443
      - 9443:9443
    volumes:
      - ./caddy_data:/data
      - ./Caddyfile:/etc/caddy/Caddyfile
      - /etc/dehydrated/certs/cisoas-sto4-prod-1.sunet.se:/certs