version: '3.4'
services:
  miniflux:
    image: miniflux/miniflux:latest
    expose:
      - "8080"
    depends_on:
      - db
    environment:
      - "DATABASE_URL: postgres://miniflux:${DB_PW}@db/miniflux?sslmode=disable"
  db:
    image: postgres:15-alpine
    environment:
      - POSTGRES_USER: miniflux
      - POSTGRES_PASSWORD: ${DB_PW}
      - VIRTUAL_HOST: rss.dmeiburg.de
      - LETSENCRYPT_HOST: rss.dmeiburg.de
      - LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
      - OAUTH2_PROVIDER: oidc
      - OAUTH2_CLIENT_ID: miniflux
      - OAUTH2_CLIENT_SECRET: ${SECRET}
      - OAUTH2_REDIRECT_URL: https://rss.dmeiburg.de/oauth2/oidc/callback
      - OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://sso.dmeiburg.de/application/o/miniflux/
      - OAUTH2_USER_CREATION: 1
      - RUN_MIGRATIONS: 1
      - CREATE_ADMIN: 1
      - ADMIN_USERNAME: admin
      - ADMIN_PASSWORD: ${ADMIN_PW}

    volumes:
      - miniflux-db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "miniflux"]
      interval: 10s
      start_period: 30s

volumes:
  miniflux-db:

networks:
    default:
      name: nginx-proxy
      external: true