# Mako, a private notebook you sign in to with Authentik. Reach it through an HTTPS reverse proxy
# (or Hammerhead) that forwards to 127.0.0.1:8490, and give Authentik the redirect URI
# https://notes.example.com/auth/callback (use your own address).
services:
  mako:
    image: git.veillax.com/veillax/mako:latest   # or: build: ..
    restart: unless-stopped
    ports:
      - "127.0.0.1:8490:8490"
    environment:
      MAKO_PUBLIC_URL: https://notes.example.com
      MAKO_OIDC_ISSUER: https://auth.example.com/application/o/mako/
      MAKO_OIDC_CLIENT_ID: change-me
      MAKO_OIDC_CLIENT_SECRET: change-me
      # MAKO_ALLOWED: you@example.com   # optional: limit who may sign in
    volumes:
      - ./config:/config       # mako.json (the signing secret) and data/ (your pages) live here