Add OAuth

compose.yml

@@ -26,10 +26,11 @@ services:
       - CMD_OAUTH2_PROVIDERNAME
       - CMD_OAUTH2_BASEURL
       - CMD_OAUTH2_CLIENT_ID
-      - CMD_OAUTH2_CLIENT_SECRET
+      - CMD_OAUTH2_CLIENT_SECRET_FILE=/run/secrets/oauth_key
       - CMD_OAUTH2_AUTHORIZATION_URL
       - CMD_OAUTH2_TOKEN_URL
       - CMD_OAUTH2_USER_PROFILE_URL
+      - CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR
     depends_on:
       - postgres
     networks:
@@ -39,6 +40,7 @@ services:
       - codimd_uploads:/home/hackmd/app/public/uploads
     secrets:
       - db_password
+      - oauth_key
     entrypoint: /docker-entrypoint2.sh
     configs:
       - source: entrypoint2_conf
@@ -55,6 +57,12 @@ services:
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`)"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
+    healthcheck:
+      test: ["CMD", "wget", "-qO", "-", "http://localhost:3000"]
+      interval: 30s
+      timeout: 10s
+      retries: 10
+      start_period: 1m
 
 volumes:
   postgres:
@@ -64,6 +72,9 @@ secrets:
   db_password:    
     external: true 
     name: ${STACK_NAME}_db_password_${DB_PASSWORD_VERSION}
+  oauth_key:    
+    external: true 
+    name: ${STACK_NAME}_oauth_key_${OAUTH_KEY_VERSION}
 
 networks:
   proxy: