services:

  kong:
    ports: !reset []

  nginx:
    container_name: supabase-nginx
    image: jonasal/nginx-certbot:6.0.1-nginx1.29.5
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      kong:
        condition: service_healthy
    environment:
      PROXY_DOMAIN: ${PROXY_DOMAIN}
      CERTBOT_EMAIL: ${CERTBOT_EMAIL}
      PROXY_AUTH_USERNAME: ${DASHBOARD_USERNAME}
      PROXY_AUTH_PASSWORD: ${DASHBOARD_PASSWORD}
    command:
      - /bin/bash
      - -c
      - |
        printf '%s:%s\n' "$${PROXY_AUTH_USERNAME}" "$$(openssl passwd -apr1 "$${PROXY_AUTH_PASSWORD}")" > /etc/nginx/user_conf.d/dashboard-passwd && \
        envsubst '$${PROXY_DOMAIN}' < /etc/nginx/supabase-nginx.conf.tpl > /etc/nginx/user_conf.d/nginx.conf && \
        /scripts/start_nginx_certbot.sh
    volumes:
      - ./volumes/proxy/nginx/supabase-nginx.conf.tpl:/etc/nginx/supabase-nginx.conf.tpl:ro
      - nginx_letsencrypt:/etc/letsencrypt

volumes:
  nginx_letsencrypt: