[variables]
main_domain = "${domain}"
dex_domain = "dex-${domain}"
secret_key = "${hash:64}"
utils_secret = "${base64:32}"
client_secret = "${base64:32}"
postgres_password = "${password}"

[[config.domains]]
serviceName = "outline"
port = 3_000
host = "${main_domain}"

[[config.domains]]
serviceName = "dex"
port = 5_556
host = "${dex_domain}"

[config.env]
URL = "https://${main_domain}"
DEX_URL = "https://${dex_domain}"
DOMAIN_NAME = "${main_domain}"
POSTGRES_PASSWORD = "${postgres_password}"
SECRET_KEY = "${secret_key}"
UTILS_SECRET = "${utils_secret}"
CLIENT_SECRET = "${client_secret}"

[[config.mounts]]
filePath = "/etc/dex/config.yaml"
content = """
issuer: https://${dex_domain}

web:
  http: 0.0.0.0:5556

storage:
  type: memory

enablePasswordDB: true

frontend:
   issuer: Outline

logger:
  level: debug

staticPasswords:
  - email: "admin@example.com"
    # bcrypt hash of the string "password": $(echo password | htpasswd -BinC 10 admin | cut -d: -f2)
    hash: "$2y$10$jsRWHw54uxTUIfhjgUrB9u8HSzPk7TUuQri9sXZrKzRXcScvwYor."
    username: "admin"
    userID: "1"


oauth2:
  skipApprovalScreen: true
  alwaysShowLoginScreen: false
  passwordConnector: local

staticClients:
  - id: "outline"
    redirectURIs:
      - https://${main_domain}/auth/oidc.callback
    name: "Outline"
    secret: "${client_secret}" 
"""

[[config.mounts]]
filePath = "/etc/nginx/conf.d/default.conf"
content = """
server {
  listen 5556;

  location = / {
    add_header Content-Type text/plain;
    return 200 "Dex ready\n";
  }

  location / {
    proxy_pass http://dex-server:5556;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }
}
"""
