version: '3.8'

services:
  quixzoom-sso-auth:
    build: .
    container_name: quixzoom-sso-auth
    ports:
      - "8088:8080"
    environment:
      - PORT=8080
      - HOST=0.0.0.0
      - REDIS_HOST=quixzoom-sso-redis
      - REDIS_PORT=6379
      - REDIS_DB=0
      - JWT_PRIVATE_KEY_PATH=/app/keys/quixzoom-private.pem
      - JWT_PUBLIC_KEY_PATH=/app/keys/quixzoom-public.pem
    volumes:
      - ./keys:/app/keys
      - ./login.html:/app/static/login.html:ro
      - ./mina-sidor.html:/app/static/mina-sidor.html:ro
    depends_on:
      - quixzoom-sso-redis
    networks:
      - quixzoom-sso
    restart: unless-stopped

  quixzoom-sso-redis:
    image: redis:7-alpine
    container_name: quixzoom-sso-redis
    # Internal network only - no port exposed to host
    volumes:
      - redis-data:/data
    networks:
      - quixzoom-sso
    restart: unless-stopped

networks:
  quixzoom-sso:
    driver: bridge

volumes:
  redis-data: