services:
  server:
    image: registry.infra.ossystems.io/shellhub/server-enterprise:${SHELLHUB_VERSION}
    restart: unless-stopped
    environment:
      - REDIS_URI=redis://redis:6379
      - SHELLHUB_DOMAIN=${SHELLHUB_DOMAIN}
      - SHELLHUB_AUTO_SSL=${SHELLHUB_AUTO_SSL}
      - SHELLHUB_SAML_SECRET=${SHELLHUB_SAML_SECRET}
      - ADMIN_API_USERNAME=${SHELLHUB_ENTERPRISE_ADMIN_USERNAME}
      - ADMIN_API_PASSWORD=${SHELLHUB_ENTERPRISE_ADMIN_PASSWORD}
      - SHELLHUB_OBJECT_STORAGE_ENDPOINT=${SHELLHUB_OBJECT_STORAGE_ENDPOINT}
      - SHELLHUB_OBJECT_STORAGE_REGION=${SHELLHUB_OBJECT_STORAGE_REGION}
      - SHELLHUB_OBJECT_STORAGE_BUCKET=${SHELLHUB_OBJECT_STORAGE_BUCKET}
      - SHELLHUB_OBJECT_STORAGE_ACCESS_KEY=${SHELLHUB_OBJECT_STORAGE_ACCESS_KEY}
      - SHELLHUB_OBJECT_STORAGE_SECRET_KEY=${SHELLHUB_OBJECT_STORAGE_SECRET_KEY}
      - SHELLHUB_WEB_ENDPOINTS=${SHELLHUB_WEB_ENDPOINTS}
      - SHELLHUB_WEB_ENDPOINTS_DOMAIN=${SHELLHUB_WEB_ENDPOINTS_DOMAIN}
      - MAXMIND_MIRROR=${SHELLHUB_MAXMIND_MIRROR:-}
      - MAXMIND_LICENSE=${SHELLHUB_MAXMIND_LICENSE:-}
      - SHELLHUB_SESSION_RETENTION_DAYS=${SHELLHUB_SESSION_RETENTION_DAYS}
    secrets:
      - api_private_key
      - api_public_key
    networks:
      - shellhub

  ui:
    image: registry.infra.ossystems.io/cache/shellhubio/ui:${SHELLHUB_VERSION}
    environment:
      - SHELLHUB_WEB_ENDPOINTS=${SHELLHUB_WEB_ENDPOINTS}

  gateway:
    image: registry.infra.ossystems.io/cache/shellhubio/gateway:${SHELLHUB_VERSION}
    environment:
      - SHELLHUB_WEB_ENDPOINTS=${SHELLHUB_WEB_ENDPOINTS}
      - SHELLHUB_WEB_ENDPOINTS_DOMAIN=${SHELLHUB_WEB_ENDPOINTS_DOMAIN}
      - SHELLHUB_WEB_ENDPOINTS_DNS_PROVIDER=${SHELLHUB_WEB_ENDPOINTS_DNS_PROVIDER}
      - SHELLHUB_WEB_ENDPOINTS_DNS_PROVIDER_TOKEN=${SHELLHUB_WEB_ENDPOINTS_DNS_PROVIDER_TOKEN}
      - SHELLHUB_WEB_ENDPOINTS_ACME_DNS_URL=${SHELLHUB_WEB_ENDPOINTS_ACME_DNS_URL}
      - SHELLHUB_WEB_ENDPOINTS_ACME_DNS_USERNAME=${SHELLHUB_WEB_ENDPOINTS_ACME_DNS_USERNAME}
      - SHELLHUB_WEB_ENDPOINTS_ACME_DNS_PASSWORD=${SHELLHUB_WEB_ENDPOINTS_ACME_DNS_PASSWORD}
      - SHELLHUB_WEB_ENDPOINTS_ACME_DNS_SUBDOMAIN=${SHELLHUB_WEB_ENDPOINTS_ACME_DNS_SUBDOMAIN}

  redis:
    image: registry.infra.ossystems.io/cache/valkey/valkey:9.1-alpine

  minio:
    image: docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z
    restart: unless-stopped
    command: server /data
    environment:
      - MINIO_ROOT_USER=${SHELLHUB_OBJECT_STORAGE_ACCESS_KEY}
      - MINIO_ROOT_PASSWORD=${SHELLHUB_OBJECT_STORAGE_SECRET_KEY}
    networks:
      - shellhub