services:
  nginx:
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.prod.conf:/etc/nginx/nginx.conf:ro
      - ./ssl:/etc/nginx/ssl:ro
  app:
    environment:
      - ENABLE_STRICT_HTTPS=True
      - GITHUB_OAUTH_ENCRYPTION_KEY=${GITHUB_OAUTH_ENCRYPTION_KEY:?Set GITHUB_OAUTH_ENCRYPTION_KEY}
      - GITHUB_APP_PRIVATE_KEY_PATH=/run/secrets/github_app_private_key
    secrets:
      - github_app_private_key
  worker:
    environment:
      - ENABLE_STRICT_HTTPS=True
  telegram-bot:
    environment:
      - ENABLE_STRICT_HTTPS=True
      - TELEGRAM_DRAFT_INTERVAL_SECONDS=${TELEGRAM_DRAFT_INTERVAL_SECONDS:-0.55}
      - TELEGRAM_MAX_CONTEXT_MESSAGES=${TELEGRAM_MAX_CONTEXT_MESSAGES:-4}
      - TELEGRAM_MAX_CONTEXT_MESSAGES_INLINE=${TELEGRAM_MAX_CONTEXT_MESSAGES_INLINE:-4}
      - TELEGRAM_THINKING_LEVEL=${TELEGRAM_THINKING_LEVEL:-low}
      - TELEGRAM_THINKING_LEVEL_MESSAGE=${TELEGRAM_THINKING_LEVEL_MESSAGE:-medium}
      - TELEGRAM_THINKING_LEVEL_INLINE=${TELEGRAM_THINKING_LEVEL_INLINE:-}

secrets:
  github_app_private_key:
    file: ${GITHUB_APP_PRIVATE_KEY_PATH:?Set GITHUB_APP_PRIVATE_KEY_PATH to the host PEM file}