# Opt-in overlay, layered ON TOP of docker-compose.yml (never alone):
#
#   docker compose -f docker-compose.yml -f docker-compose.openzaak.yml up -d
#
# Points the containerized BFF (`api`) at a real OpenZaak instead of the local SQLite store.
# `api` joins the OpenZaak project's OWN network (external, below) to reach its `web` service
# by the dotted alias `docker-compose.openzaak.bff.yml` (backend/openzaak/) gives it —
# `openzaak.local`, not a bare `openzaak`: Django's URLValidator rejects a dotless hostname
# embedded in a URL field (confirmed empirically — see that file's header comment for the full
# reasoning, including why the join runs in this direction and not the reverse). See
# `scripts/openzaak-ui-up.sh` for the one command that brings both projects up together, seeds
# the catalogus, grants the extra scope this alias needs, and fills in OPENZAAK_ZAAKTYPE_URL.
#
# ClientId/Secret/RSINs match exactly what backend/openzaak/bootstrap-catalogus.sh provisions.
# Only `herregistratie` gets a ZaaktypeUrls entry: the harness seeds exactly one zaaktype
# ("Herregistratie arts") — a registratie/intake submission would hit an unconfigured zaaktype,
# caught by WP-60's retry/flagging (Aanvraag.ZgwError), not surfaced as a UI error. DrcBaseUrl/
# InformatieobjecttypeUrls are deliberately left unset: this harness seeds no Documenten
# content or scope, so a document upload's ZGW half just no-ops (also caught since WP-60).
#
# ZGW authorization scopes a zaaktype write by the EXACT zaaktype URL string an Applicatie was
# granted for (confirmed empirically: the same zaaktype, referenced via a different hostname
# string, 403s even though the URL itself resolves fine) — bootstrap-catalogus.sh only ever
# grants the `http://localhost:8000/...` form (it runs on the host). scripts/openzaak-ui-up.sh
# additively grants the SAME scope again for the `openzaak.local:8000` form this file's `api`
# actually presents, without touching bootstrap-catalogus.sh's own (host-usable) grant.
services:
  api:
    environment:
      - Zgw__Enabled=true
      - Zgw__ZrcBaseUrl=http://openzaak.local:8000/zaken/api/v1
      - Zgw__ZtcBaseUrl=http://openzaak.local:8000/catalogi/api/v1
      # Uncomment to chase the per-container flake (scripts/openzaak-ui-up.sh's header
      # comment): logs Content-Length vs. actual bytes sent for every outbound ZGW POST.
      # - ZGW_DEBUG_HTTP=1
      - Zgw__ClientId=bigregister-test
      - Zgw__Secret=bigregister-test-secret
      - Zgw__UserId=bigregister-test
      - Zgw__UserRepresentation=Docker compose OpenZaak test
      - Zgw__Bronorganisatie=123443210
      - Zgw__VerantwoordelijkeOrganisatie=123443210
      - Zgw__ZaaktypeUrls__herregistratie=${OPENZAAK_ZAAKTYPE_URL:?run backend/openzaak/bootstrap-catalogus.sh and export OPENZAAK_ZAAKTYPE_URL first — see scripts/openzaak-ui-up.sh for the one-command version}
    networks:
      default: {}
      oz: {}

networks:
  oz:
    name: openzaak_default
    external: true