services:
  mealie:
    image: ghcr.io/mealie-recipes/mealie:${MEALIE_TAG:-latest}
    restart: unless-stopped
    ports:
      - "${MEALIE_PORT:-9000}:9000"
    volumes:
      - "${DATA_PATH:-./mealie/data}:/app/data"
    environment:
      - ALLOW_SIGNUP=${ALLOW_SIGNUP:-false}
      - TZ=${TZ:-Europe/Berlin}
      - PUID=${PUID:-1000}
      - PGID=${PGID:-1000}
      
      # OpenID Connect (OIDC) Settings
      - OIDC_AUTH_ENABLED=${OIDC_AUTH_ENABLED:-false}
      - OIDC_CONFIGURATION_URL=${OIDC_CONFIGURATION_URL}
      - OIDC_CLIENT_ID=${OIDC_CLIENT_ID:-mealie}
      - OIDC_PROVIDER_NAME=${OIDC_PROVIDER_NAME:-Keycloak}
      - OIDC_AUTO_REDIRECT=${OIDC_AUTO_REDIRECT:-true}
      - OIDC_USER_GROUP=${OIDC_USER_GROUP:-mealie-users}
      - OIDC_GROUPS_CLAIM=${OIDC_GROUPS_CLAIM:-groups}
      - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET}