---
services:
  miniflux:
    image: miniflux/miniflux:2.2.14
    container_name: miniflux
    depends_on:
      - authentik-server
      - postgres
    networks:
      public:
        ipv4_address: 192.168.240.35
    labels:
      caddy: miniflux.${DOMAIN}
      caddy.reverse_proxy: "{{ upstreams 8080 }}"
    environment:
      - BASE_URL=https://miniflux.${DOMAIN}
      - DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres/miniflux?sslmode=disable
      - RUN_MIGRATIONS=1
      - CLEANUP_ARCHIVE_READ_DAYS=3650 # remove after 10 years
      - CLEANUP_ARCHIVE_UNREAD_DAYS=-1 # never remove unread entries
      - DISABLE_LOCAL_AUTH=TRUE
      - OAUTH2_PROVIDER=oidc
      - OAUTH2_CLIENT_ID=d5xw7cfDe2kyHEfKSRZgz52nF8dNPDBkTrtuTRgU
      - OAUTH2_CLIENT_SECRET=27AhETfbXSMKRDstKGutbDe1Ohz4G2damu9OIuSozNhAf2uFBMlWPmtytpoqIl6kGFeNPLp6dVZ62YHC2MaSxNuR5JfQFbMRxvn1QFNg9ke3b5JiKogRWlzAktFp0fGb
      - OAUTH2_REDIRECT_URL=https://miniflux.kucharczyk.xyz/oauth2/oidc/callback
      - OAUTH2_OIDC_DISCOVERY_ENDPOINT=https://authentik.kucharczyk.xyz/application/o/miniflux/
      - OAUTH2_USER_CREATION=1
      - OAUTH2_OIDC_PROVIDER_NAME=authentik
    restart: unless-stopped