services:
  ocis:
    image: owncloud/ocis:8
    container_name: ocis
    restart: unless-stopped
    ports:
      - "9200:9200"
# THE FIX: Forces automatic initialization on first run, then fires up the server
    entrypoint: ["/bin/sh", "-c", "ocis init --insecure false || true; ocis server"]
    environment:
      # General Network URL
      - OCIS_URL=https://ocis.johnsnexus.click
#      - OCIS_INSECURE=true
      
      # Routing Configuration overrides
      - PROXY_HTTP_ADDR=0.0.0.0:9200
      - PROXY_TLS=false
      - OCIS_LOG_LEVEL=info
      - DEMO_USERS=false
      # CRITICAL FIX: Forces the IDP service to accept an insecure HTTP issuer
      - OCIS_OIDC_ISSUER=https://ocis.johnsnexus.click
      - IDP_INSECURE=false
      
      # Token Cryptography (Hardcoded bypasses ocis.yaml file demand)
      - OCIS_JWT_SECRET=YX12IFGHmJyZ6xz51DIOJ60mZL9nYK7wUQOhRyGR49vkTHjGDMd2YjKA8IbVZl6s
      - IDM_JWT_SECRET=YX12IFGHmJyZ6xz51DIOJ60mZL9nYK7wUQOhRyGR49vkTHjGDMd2YjKA8IbVZl6s
      
      # Identity Manager (IDM) User Provisioning (Bypasses manual "ocis init" completely)
      - IDM_ADMIN_PASSWORD=Zephie2023!
    volumes:
      - ocis-data:/var/lib/ocis
      - ocis-config:/etc/ocis

volumes:
  ocis-data:
  ocis-config: