# vi: ft=yaml
version: '3'

services:
  concourse-db:
    image: postgres
    restart: always
    environment:
      POSTGRES_DB: concourse
      POSTGRES_PASSWORD: {{ postgres_password }}
      POSTGRES_USER: concourse_user
      PGDATA: /database
    volumes:
      - /mnt/data/concourse:/database

  concourse:
    image: concourse/concourse
    restart: always
    command: quickstart
    privileged: true
    depends_on: [concourse-db]
    ports: ["3000:8080"]
    environment:
      CONCOURSE_POSTGRES_HOST: concourse-db
      CONCOURSE_POSTGRES_USER: concourse_user
      CONCOURSE_POSTGRES_PASSWORD: {{ postgres_password }}
      CONCOURSE_POSTGRES_DATABASE: concourse
      CONCOURSE_EXTERNAL_URL: https://concourse.pim.kunis.nl:444
      CONCOURSE_ADD_LOCAL_USER: admin:{{ admin_password }}
      CONCOURSE_MAIN_TEAM_LOCAL_USER: admin
      # instead of relying on the default "detect"
      CONCOURSE_WORKER_BAGGAGECLAIM_DRIVER: overlay
      CONCOURSE_CLIENT_SECRET: {{ client_secret }}
      CONCOURSE_TSA_CLIENT_SECRET: {{ client_secret }}
      CONCOURSE_X_FRAME_OPTIONS: allow
      CONCOURSE_CONTENT_SECURITY_POLICY: "*"
      CONCOURSE_CLUSTER_NAME: tutorial
      CONCOURSE_WORKER_CONTAINERD_DNS_SERVER: "192.168.30.1"
      # For ARM-based machine, change the Concourse runtime to "houdini"
      CONCOURSE_WORKER_RUNTIME: "containerd"