services:
  openproject:
    image: openproject/openproject:17
    container_name: openproject
    restart: unless-stopped

    # Secrets are injected by Infisical at runtime.
    environment:
      SECRET_KEY_BASE: ${OPENPROJECT_SECRET_KEY_BASE}
      OPENPROJECT_HOST__NAME: team.silveressence.net
      OPENPROJECT_HTTPS: "true"

      DATABASE_URL: postgres://openproject:${POSTGRES_OPENPROJECT_PASSWORD}@postgres:5432/openproject

      OPENPROJECT_EMAIL__DELIVERY__METHOD: smtp
      OPENPROJECT_SMTP__ADDRESS: ${SMTP_HOST}
      OPENPROJECT_SMTP__PORT: "${SMTP_PORT}"
      OPENPROJECT_SMTP__DOMAIN: silveressence.net
      OPENPROJECT_SMTP__AUTHENTICATION: login
      OPENPROJECT_SMTP__ENABLE__STARTTLS__AUTO: "true"
      OPENPROJECT_SMTP__USER__NAME: ${SMTP_USERNAME}
      OPENPROJECT_SMTP__PASSWORD: ${SMTP_PASSWORD}

    volumes:
      - /srv/docker/openproject/assets:/var/openproject/assets

    ports:
      - "8082:80"

    networks:
      - internal

networks:
  internal:
    external: true