version: "3.9"
services:

  idhub:
    init: true
    image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/idhub:latest
    environment:
      #- DEPLOYMENT=${IDHUB_PILOT_TEST__IDHUB_DEPLOYMENT}
      # temp disable 2fa login
      - DEPLOYMENT=DEVELOPMENT
      - ADMIN_EMAIL=${IDHUB_PILOT_TEST__ADMIN_EMAIL}
      - CREATE_TEST_USERS=true
      - ENABLE_EMAIL=false
      - ENABLE_2FACTOR_AUTH=false
      - SECRET_KEY=${IDHUB_SECRET_KEY:-publicsecretisnotsecureVtmKBfxpVV47PpBCF2Nzz2H6qnbd}
      - ALLOWED_HOSTS=${IDHUB_ALLOWED_HOSTS:-*}
      - STATIC_ROOT=${IDHUB_STATIC_ROOT:-/static/}
      - MEDIA_ROOT=${IDHUB_MEDIA_ROOT:-/media/}
      - PORT=${IDHUB_PORT:-9001}
      - DJANGO_SUPERUSER_USERNAME=${IDHUB_USER}
      - DJANGO_SUPERUSER_PASSWORD=${IDHUB_PASSWD}
      - DJANGO_SUPERUSER_EMAIL=${IDHUB_EMAIL}
      - DOMAIN=https://idhub-nightly.demo.pangea.org
      - CSRF_TRUSTED_ORIGINS=https://idhub-nightly.demo.pangea.org
      - DEFAULT_FROM_EMAIL=${IDHUB_DEFAULT_FROM_EMAIL}
      - EMAIL_HOST=${IDHUB_EMAIL_HOST}
      - EMAIL_HOST_USER=${IDHUB_EMAIL_HOST_USER}
      - EMAIL_HOST_PASSWORD=${IDHUB_EMAIL_HOST_PASSWORD}
      - EMAIL_PORT=${IDHUB_EMAIL_PORT}
      - EMAIL_USE_TLS=${IDHUB_EMAIL_USE_TLS}
      - EMAIL_BACKEND=${IDHUB_EMAIL_BACKEND}
      - SUPPORTED_CREDENTIALS=['FederationMembership', 'CourseCredential']
    ports:
      - 9061:9001
    volumes:
      - ./idhub__instance-nightly:/opt/idhub