# ─────────────────────────────────────────────
# HoneyOS — Betrieb aus der Gitea-Registry
#
#   mkdir -p /srv/honeyos && chown 1000:1000 /srv/honeyos
#   cp .env.example .env && ausfüllen
#   docker login gitea.honeyy.duckdns.org
#   docker compose pull && docker compose up -d
#
# Zu sichern ist genau eine Datei: ${HONEYOS_DATA_DIR}/honeyos.json — darin
# stehen die Apps und die Einstellungen je Nutzer. Sichere sie zusammen mit
# der .env; ohne HONEYOS_SESSION_SECRET müssen sich alle neu anmelden.
# ─────────────────────────────────────────────

services:
  honeyos:
    image: gitea.honeyy.duckdns.org/docker/honeyos:latest
    container_name: honeyos
    restart: unless-stopped
    user: "1000:1000"
    ports:
      - "${HONEYOS_PORT:-8088}:8080"
    volumes:
      - ${HONEYOS_DATA_DIR:-/srv/honeyos}:/data
    environment:
      - HONEYOS_PUBLIC_URL=${HONEYOS_PUBLIC_URL:-}
      - HONEYOS_SESSION_SECRET=${HONEYOS_SESSION_SECRET:-}
      - HONEYOS_OIDC_ISSUER=${HONEYOS_OIDC_ISSUER:-}
      - HONEYOS_OIDC_CLIENT_ID=${HONEYOS_OIDC_CLIENT_ID:-}
      - HONEYOS_OIDC_CLIENT_SECRET=${HONEYOS_OIDC_CLIENT_SECRET:-}
      - HONEYOS_OIDC_REDIRECT_URL=${HONEYOS_OIDC_REDIRECT_URL:-}
      - HONEYOS_BUTTON_LABEL=${HONEYOS_BUTTON_LABEL:-Anmelden}
      - HONEYOS_ALLOWED_USERS=${HONEYOS_ALLOWED_USERS:-}
      - HONEYOS_PROXY_AUTH=${HONEYOS_PROXY_AUTH:-}
      - HONEYOS_USER_HEADER=${HONEYOS_USER_HEADER:-}
      - HONEYOS_APPS_KEY=${HONEYOS_APPS_KEY:-}