---
# Managed by Ansible — do not edit manually
# Smallstep step-ca — SSH & X.509 Certificate Authority

services:
  step-ca:
    image: {{ stepca_image }}:{{ stepca_image_tag }}
    container_name: {{ stepca_container_name }}
    restart: unless-stopped
    ports:
      - "{{ stepca_listen_port }}:{{ stepca_listen_port }}"
    volumes:
      - {{ stepca_data_dir }}:/home/step
    environment:
      - DOCKER_STEPCA_INIT_NAME={{ stepca_ca_name }}
      - DOCKER_STEPCA_INIT_DNS_NAMES={{ stepca_dns_names }}
      - DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT={{ stepca_remote_management | lower }}
      - DOCKER_STEPCA_INIT_SSH={{ stepca_ssh_enabled | lower }}
    networks:
      - {{ stepca_docker_network }}

networks:
  {{ stepca_docker_network }}:
    external: true