job "leantime" {
  datacenters = ["alo"]

  group "web" {
    network {
      port "http" {
        to = 80
      }
    }

    task "server" {
      driver = "docker"

      config {
        image = "leantime/leantime:latest"
        ports = ["http"]
        volumes = [
          "/data/compute/appdata/leantime:/var/www/html/userfiles",
        ]
      }

      env {
        LEAN_DEFAULT_TIMEZONE = "Europe/Lisbon"
        LEAN_DB_HOST = "mysql.service.consul"
        LEAN_DB_USER = "leantime"
        LEAN_DB_PASSWORD = "Xuphaedoo9kuaseeQuei"
        LEAN_DB_DATABASE = "leantime"
        LEAN_EMAIL_RETURN = "leantime@paler.net"
        LEAN_APP_URL = "https://leantime.v.paler.net"
        LEAN_EMAIL_SMTP_HOSTS = "192.168.1.1"
        LEAN_EMAIL_SMTP_AUTH = "false"
        LEAN_OIDC_ENABLE = "true"
        LEAN_OIDC_PROVIDER_URL = "https://authentik.v.paler.net/application/o/leantime/"
        LEAN_OIDC_CLIENT_ID = "nWqJu9g4avhdpmUzqqvjsExCA1Jrick7GSMd0D6u"
        LEAN_OIDC_CLIENT_SECRET = "VvPQi5q3kkVTCwN8QWwwPTCqjWc9VbRanCFxa0zB2mhr1ZPxUYXP7Ygg6naMInE4P5vyqJd5w8XiWkuecW14G4KxgXpFtWChKnCOOpe47gjZGNbkYIEDZUmkUB99Saxx"
      }

      service {
        name = "leantime"
        port = "http"

        tags = [
          "traefik.enable=true",
          "traefik.http.routers.leantime.entryPoints=websecure",
          "traefik.http.routers.leantime.middlewares=authentik@file",
        ]
      }
    }
  }
}