services:
  panel:
    build:
      context: .
      dockerfile: panel/backend/Dockerfile
    container_name: ghard-panel
    ports:
      - "${GHARD_PANEL_PORT:-8000}:8000"
    environment:
      # задай свой токен: `cp panel/backend/.env.example .env` и поправь
      GHARD_ADMIN_TOKEN: ${GHARD_ADMIN_TOKEN:-change-me}
      # gnexus-auth (OAuth PKCE): задаёшь CLIENT_ID — панель закрывается входом
      GHARD_AUTH_BASE_URL: ${GHARD_AUTH_BASE_URL:-}
      GHARD_AUTH_CLIENT_ID: ${GHARD_AUTH_CLIENT_ID:-}
      GHARD_AUTH_CLIENT_SECRET: ${GHARD_AUTH_CLIENT_SECRET:-}
      GHARD_AUTH_REDIRECT_URI: ${GHARD_AUTH_REDIRECT_URI:-}
      GHARD_AUTH_WEBHOOK_SECRET: ${GHARD_AUTH_WEBHOOK_SECRET:-}
      GHARD_AUTH_ALLOWLIST: ${GHARD_AUTH_ALLOWLIST:-}
    volumes:
      - panel-data:/data
    restart: unless-stopped

volumes:
  panel-data: