docker-compose.google.yml

# Docker Compose override for Google Workspace IdP.
#
# Usage:
#   source .env.google   # load GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_HD
#   docker compose -f docker-compose.yml -f docker-compose.google.yml up -d
#
# Overrides deeptrail-control's IdP environment variables from Keycloak to Google.
# Also provides Google OAuth credentials for service connections (Drive, Calendar, Gmail).
# Credentials come from shell environment (never hardcoded).

services:
  deeptrail-control:
    environment:
      # --- SSO / IdP ---
      - IDP_PROVIDER=google
      - IDP_ISSUER_URL=https://accounts.google.com
      - IDP_CLIENT_ID=${GOOGLE_CLIENT_ID}
      - IDP_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET}
      - IDP_REDIRECT_URI=http://localhost:8000/api/v1/auth/sso/google/callback
      - IDP_HD=${GOOGLE_HD:-}
      - IDP_FETCH_GROUPS=true
      # --- OAuth service connections (Drive, Calendar, Gmail) ---
      - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID}
      - GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET}