services:
  code-server:
    image: lscr.io/linuxserver/code-server:latest
    container_name: code-server
    restart: unless-stopped
    environment:
      PUID: 1000
      PGID: 1000
      TZ: Europe/Paris
      # Mdp fallback si SSO down (normalement on accède via SSO)
      PASSWORD: ${CODE_PASSWORD}
      SUDO_PASSWORD: ${CODE_PASSWORD}
      DEFAULT_WORKSPACE: /config/workspace
    volumes:
      - ./config:/config
    networks:
      - web
    # ⚠️ Pas de labels Traefik : OAuth2-Proxy expose le host

networks:
  web:
    external: true