services:
  oathkeeper:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        OATHKEEPER_VERSION: ${OATHKEEPER_VERSION}
    container_name: oathkeeper
    restart: unless-stopped
    ports:
      - "${OATHKEEPER_PROXY_PORT:-4455}:4455"
      - "${OATHKEEPER_API_PORT:-4456}:4456"
    environment:
      LOG_LEVEL: ${LOG_LEVEL:-info}
      KRATOS_ADMIN_URL: ${KRATOS_ADMIN_URL}
      KRATOS_PUBLIC_URL: ${KRATOS_PUBLIC_URL}
      BACKEND_URL: ${BACKEND_URL}
      OATHKEEPER_SECRET: ${OATHKEEPER_SECRET}
    networks:
      - ory-network
    healthcheck:
      test: ["CMD", "curl", "-f", "-s", "http://localhost:4456/health/ready"]
      interval: 10s
      timeout: 5s
      retries: 5

networks:
  ory-network:
    external: true
    name: ory-network