# OIDC demo app (API + React). Run Authentik separately or via docker-compose.authentik.yml
name: oidc-auth-app

services:
  api:
    build:
      context: ../backend
      dockerfile: Dockerfile
    restart: unless-stopped
    env_file:
      - .env
    environment:
      PORT: "3001"
      NODE_ENV: production
    ports:
      - "${API_PORT:-3001}:3001"
    healthcheck:
      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:3001/health"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 40s

  web:
    build:
      context: ../frontend
      dockerfile: Dockerfile
      args:
        VITE_AUTHENTIK_URL: ${AUTHENTIK_HOST}
        VITE_OIDC_APP_SLUG: ${OIDC_APP_SLUG:-oidc-demo}
        VITE_OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
        VITE_API_URL: ${PUBLIC_API_URL}
    restart: unless-stopped
    ports:
      - "${WEB_PORT:-80}:80"
    depends_on:
      api:
        condition: service_started