version: '3.2'

services:
<% if @dehydrated_name || $certprovider == 'dehydrated' -%>
  always-https:
    image: docker.sunet.se/always-https
    ports:
      - '80:80'
    environment:
      - 'ACME_URL=http://acme-c.sunet.se/'
<% end -%>
  satosa:
    image: docker.sunet.se/satosa:<%= @satosa_tag %>
    volumes:
      - '/etc/satosa:/etc/satosa'
<% if @dehydrated_name -%>
      - '/etc/dehydrated:/etc/dehydrated'
<% end -%>
<% if @certprovider != 'none' -%>
      - '<%= @certvol %>:<%= @certvol %>'
<% end -%>
    ports:
      - '443:8000'
    environment:
      - 'METADATA_DIR=/etc/satosa/metadata'
      - 'WORKER_TIMEOUT=120'