---

services:
  dooris:
    image: git.hamburg.ccc.de/ccchh/hmdooris/hmdooris:latest
    environment:
      HMDOORIS_ALLOWED_IPS: "2a07:c481:1:c8::/64 2a01:170:118b::/56 172.31.200.0/23 172.31.202.0/27"
      HMDOORIS_CCUJACK_CERTIFICATE_PATH: false
      HMDOORIS_CCUJACK_PASSWORD: "{{ secret__dooris_ccujack_password }}"
      HMDOORIS_CCUJACK_URL: https://hmdooris-ccu.ccchh.net:2122
      HMDOORIS_CCUJACK_USERNAME: dooris
      HMDOORIS_CLIENT_ID: dooris
      HMDOORIS_CLIENT_SECRET: "{{ secret__dooris_client_secret }}"
      HMDOORIS_DISCOVERY_URL: https://id.hamburg.ccc.de/realms/ccchh/.well-known/openid-configuration
      HMDOORIS_LISTEN: '0.0.0.0:3000'
      HMDOORIS_REQUIRES_GROUP: /intern
      HMDOORIS_URL: https://dooris.ccchh.net
      PYTHONWARNINGS: "ignore:Unverified HTTPS request"
      #DEBUG: true
    ports:
      - "127.0.0.1:3000:3000"
    restart: unless-stopped