infrastructure/roles/linkwarden/vars/main.yml

---
linkwarden_secret: "{{ vault_linkwarden.secret }}"

linkwarden_db_host_port: "{{ postgres.host }}:{{ postgres.port }}"
linkwarden_db_user: "{{ opentofu.postgresql_service_roles.linkwarden.name }}"
linkwarden_db_pass: "{{ opentofu.postgresql_service_roles.linkwarden.password }}"
linkwarden_db_database: linkwarden

linkwarden_s3_accesskey: "{{ opentofu.scaleway_service_keys.linkwarden.access_key }}"
linkwarden_s3_secretkey: "{{ opentofu.scaleway_service_keys.linkwarden.secret_key }}"

linkwarden_svc:
  domain: bookmarks.serguzim.me
  name: linkwarden
  port: 3000

linkwarden_env:
  NEXTAUTH_SECRET: "{{ linkwarden_secret }}"
  NEXTAUTH_URL: https://bookmarks.serguzim.me/api/v1/auth
  DATABASE_URL: postgres://{{ linkwarden_db_user }}:{{ linkwarden_db_pass }}@{{ linkwarden_db_host_port }}/{{ linkwarden_db_database }}

  SPACES_KEY: "{{ linkwarden_s3_accesskey }}"
  SPACES_SECRET: "{{ linkwarden_s3_secretkey }}"
  SPACES_ENDPOINT: "{{ opentofu.scaleway_service_buckets.linkwarden.api_endpoint }}"
  SPACES_BUCKET_NAME: "{{ opentofu.scaleway_service_buckets.linkwarden.name }}"
  SPACES_REGION: "{{ opentofu.scaleway_service_buckets.linkwarden.region }}"
  SPACES_FORCE_PATH_STYLE: false

  NEXT_PUBLIC_DISABLE_REGISTRATION: true
  NEXT_PUBLIC_CREDENTIALS_ENABLED: true
  NEXT_PUBLIC_AUTHENTIK_ENABLED: false
  AUTHENTIK_CUSTOM_NAME: auth.serguzim.me
  AUTHENTIK_ISSUER: https://auth.serguzim.me/application/o/bookmarks-serguzim-me
  AUTHENTIK_CLIENT_ID: "{{ vault_linkwarden.oidc_client.id }}"
  AUTHENTIK_CLIENT_SECRET: "{{ vault_linkwarden.oidc_client.secret }}"

linkwarden_compose:
  watchtower: true
  image: ghcr.io/linkwarden/linkwarden:latest