---
inception_project_version: latest
inception_project_compose_dir: '/srv/inception_project_stack'
inception_project_docker_stack_name: 'inception-project'
inception_project_docker_service_name: 'inception'
inception_project_docker_image: 'inceptionproject/inception:{{ inception_project_version }}'
inception_project_docker_network: 'inception_project_net'
# We need a directory because the confg file goes inside it
inception_project_service_port: 8080
# IMPORTANT. Set it to True for the server that is going to host the DB
inception_project_service_constraints: 'node.labels.service_data==inception_project'
# inception_project_behind_haproxy: False
inception_project_haproxy_public_net: 'haproxy-public'
# Settings
inception_project_server_port: 8080
inception_project_server_address: '0.0.0.0'
inception_project_server_endpoint: 'inception.localdomain'
inception_project_server_behind_reverse_proxy: true
inception_project_backup_interval: 300
inception_project_backup_keep_number: 10
inception_project_debug_enabled: 'false'
# Required when running behind a reverse proxy
inception_project_disable_crsf: True
# In seconds
inception_project_backup_keep_time: 0
inception_pep: True
inception_project_pep_allow_iframe: True
inception_authz_audience_name: inception
keycloak_auth_server: https://localhost
# keycloak_auth_credentials_prod: 'use a vault file'
# Choices: preauth, database
inception_project_server_auth_mode: 'database'
inception_project_server_preauth_header: 'remote_user'
inception_project_server_preauth_default_roles: ''
inception_project_server_set_preauth_logout_url: false
inception_project_server_preauth_logout_url: ""
inception_project_server_preauth_users_roles: []
# - { username: 'user', roles: 'ROLE_PROJECT_CREATOR,ROLE_ADMIN' }
# DB
inception_project_db_as_container: True
inception_project_db_image: 'mariadb:10.5'
inception_project_db_host: 'mysql-server'
inception_project_db_port: 3306
inception_project_db_name: 'inception'
inception_project_db_user: 'inception_user'
# inception_project_db_pwd: 'set it in a vault file'

inception_project_websockets_enabled: 'false'
inception_project_websockets_loggedevent_enabled: 'false'
inception_project_versioning_enabled: 'false'
inception_project_settings:
  - 'debug.showExceptionPage={{ inception_project_debug_enabled }}'
  - 'user.profile.accessible=true'
  - 'user-selection.hideUsers=false'
  - 'server.port={{ inception_project_server_port }}'
  - 'server.address={{ inception_project_server_address }}'
  - 'server.ajp.port=-1'
  - 'backup.interval={{ inception_project_backup_interval }}'
  - 'backup.keep.number={{ inception_project_backup_keep_number }}'
  - 'backup.keep.time={{ inception_project_backup_keep_time }}'
  - 'auth.mode={{ inception_project_server_auth_mode }}'
  - 'warnings.embeddedDatabase=true'
  - 'versioning.enabled={{ inception_project_versioning_enabled }}'
  - 'websocket.enabled={{ inception_project_websockets_enabled }}'
  - 'websocket.loggedevent.enabled={{ inception_project_websockets_loggedevent_enabled }}'

inception_project_additional_settings: []

pep_port: 80
pep_replicas: 1
# hostnames to be used as vhosts
# pep_credentials: in vault
nginx_pep_debug_enabled: false
nginx_pep_max_body_size: 500M
nginx_pep_body_timeout: 60s