services:
  guacamole:
    container_name: guacamole
    image: jwetzell/guacamole:latest
    healthcheck:
     test: curl -f http://localhost:8080/ || exit 1
    mem_limit: 6g
    cpu_shares: 1024
    security_opt:
      - no-new-privileges:false
    restart: on-failure:5
    ports:
      - 8348:8080
    volumes:
      - /volume1/docker/guacamole:/config:rw
    environment:
      PUID: 1026
      PGID: 100
      TZ: Europe/Berlin
      #TOTP_ENABLED: true
      OPENID_ENABLED: true
      OPENID_AUTHORIZATION_ENDPOINT: https://authentik.scheidel.biz/application/o/authorize/
      OPENID_CLIENT_ID: PGEkRpBiEJUDuenBXtuK5siEDqYnKCe7j6mywyco
      OPENID_ISSUER: https://authentik.scheidel.biz/application/o/guacamole/
      OPENID_JWKS_ENDPOINT: https://authentik.scheidel.biz/application/o/guacamole/jwks/
      OPENID_REDIRECT_URI: https://remote.scheidel.biz/
      OPENID_USERNAME_CLAIM_TYPE: preffered_username