# =============================================================================
# SSO - Single Sign-On (Shared Service)
# =============================================================================
# Centralized authentication for all platform services
# Single instance serving all deployments

deployment:
  id: sso
  type: shared
  name: SSO Service
  description: Authentication, session management, MFA

services:
  - id: api
    type: api
    port: 4001
    entrypoint: codebase/features/sso/backend-api
    description: Authentication, session management, MFA
    healthCheck:
      type: http
      path: /health
    dependencies:
      - postgresql
      - redis
      - vibecheck.api

  - id: postgresql
    type: postgresql
    port: 25440
    description: Users, sessions, MFA tokens

  - id: redis
    type: redis
    port: 26386
    description: Session cache, MFA tokens, rate limiting

deployments:
  dev:
    host: apricot
    autostart: true
  staging:
    host: black
    domain: sso.next.atlilith.com
  production:
    host: vps-0
    domain: sso.atlilith.com