version: '3.4'
services:
  miniflux:
    image: miniflux/miniflux:latest
    expose:
      - "8080"
    depends_on:
      - db
    environment:
      DATABASE_URL: postgres://miniflux:${DB_PW}@db/miniflux?sslmode=disable
      VIRTUAL_HOST: rss.dmeiburg.de
      LETSENCRYPT_HOST: rss.dmeiburg.de
      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
      OAUTH2_PROVIDER: oidc
      OAUTH2_CLIENT_ID: miniflux
      OAUTH2_CLIENT_SECRET: ${SECRET}
      OAUTH2_REDIRECT_URL: https://rss.dmeiburg.de/oauth2/oidc/callback
      OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://sso.dmeiburg.de/application/o/miniflux/
      OAUTH2_USER_CREATION: 1
      RUN_MIGRATIONS: 1
      CREATE_ADMIN: 1
      ADMIN_USERNAME: admin
      ADMIN_PASSWORD: ${ADMIN_PW}

  db:
    image: postgres:15-alpine
    environment:
      POSTGRES_USER: miniflux
      POSTGRES_PASSWORD: ${DB_PW}
    volumes:
      - miniflux-db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "miniflux"]
      interval: 10s
      start_period: 30s

volumes:
  miniflux-db:

networks:
    default:
      name: nginx-proxy
      external: true