---
version: '3.8'

services:
  rocketchat:
    secrets:
      - oauth_key
    environment:
      - Accounts_OAuth_Custom-Keycloak=true
      - Accounts_OAuth_Custom-Keycloak-url=${Accounts_OAuth_Custom_Keycloak_url}
      - Accounts_OAuth_Custom-Keycloak-token_path=${Accounts_OAuth_Custom_Keycloak_token_path}
      - Accounts_OAuth_Custom-Keycloak-token_sent_via=Header
      - Accounts_OAuth_Custom-Keycloak-identity_token_sent_via=header
      - Accounts_OAuth_Custom-Keycloak-identity_path=${Accounts_OAuth_Custom_Keycloak_identity_path}
      - Accounts_OAuth_Custom-Keycloak-authorize_path=${Accounts_OAuth_Custom_Keycloak_authorize_path}
      - Accounts_OAuth_Custom-Keycloak-scope=openid
      - Accounts_OAuth_Custom-Keycloak-id=${Accounts_OAuth_Custom_Keycloak_id}
      - Accounts_OAuth_Custom-Keycloak-login_style=redirect
      - Accounts_OAuth_Custom-Keycloak-button_label_text=Login via Keycloak
      - Accounts_OAuth_Custom-Keycloak-button_label_color="#FFFFFF"
      - Accounts_OAuth_Custom-Keycloak-button_color="#13679A"
      - Accounts_OAuth_Custom-Keycloak-username_field=preferred_username
      - Accounts_OAuth_Custom-Keycloak-merge_users=false
      - OAUTH_KEY_FILE=/run/secrets/oauth_key

secrets:
  oauth_key:    
    external: true 
    name: ${STACK_NAME}_oauth_key_${OAUTH_KEY_VERSION}