services:
  core:
    environment:
      AUTH_MODE: upstream
      THOTH_PUBLIC_EXPOSURE: "true"
      THT_DB_NAME: ${THT_DB_NAME:?set THT_DB_NAME}
      THT_DWH_REST_URL: ${THT_DWH_REST_URL:?set THT_DWH_REST_URL}
      THT_VEC_REST_URL: ${THT_VEC_REST_URL:?set THT_VEC_REST_URL}
      THT_OLLAMA_URL: ${THT_OLLAMA_URL:?set THT_OLLAMA_URL}
      THT_DOCS_ROOT: ${THT_DOCS_ROOT:-/data/workspaces/example/evidence-source}
      THT_DWH_API_KEY_FILE: /run/secrets/dwh_api_key
      THT_VEC_API_KEY_FILE: /run/secrets/vector_reader_api_key
      THT_VEC_WRITE_API_KEY_FILE: /run/secrets/vector_writer_api_key
      THT_MODEL_API_KEY_FILE: /run/secrets/model_api_key
      THT_SSL_CA: /run/secrets/thoth_ca.pem
    secrets:
      - source: dwh_api_key
        target: dwh_api_key
      - source: vector_reader_api_key
        target: vector_reader_api_key
      - source: vector_writer_api_key
        target: vector_writer_api_key
      - source: thoth_ca
        target: thoth_ca.pem
      - source: model_api_key
        target: model_api_key

secrets:
  dwh_api_key:
    file: ${THT_DWH_API_KEY_SECRET_FILE:?set THT_DWH_API_KEY_SECRET_FILE}
  vector_reader_api_key:
    file: ${THT_VEC_API_KEY_SECRET_FILE:?set THT_VEC_API_KEY_SECRET_FILE}
  vector_writer_api_key:
    file: ${THT_VEC_WRITE_API_KEY_SECRET_FILE:?set THT_VEC_WRITE_API_KEY_SECRET_FILE}
  thoth_ca:
    file: ${THT_CA_SECRET_FILE:?set THT_CA_SECRET_FILE}
  model_api_key:
    file: ${THT_MODEL_API_KEY_SECRET_FILE:?set THT_MODEL_API_KEY_SECRET_FILE}