infrastructure/roles/tandoor/vars/main.yml

---
tandoor_svc:
  domain: recipes.serguzim.me
  port: 80
  db:
    host: "{{ postgres.host }}"
    port: "{{ postgres.port }}"
    user: "{{ opentofu.postgresql_data.tandoor.user }}"
    pass: "{{ opentofu.postgresql_data.tandoor.pass }}"
    database: "{{ opentofu.postgresql_data.tandoor.database }}"

tandoor_env:
  DEBUG: 0
  SQL_DEBUG: 0

  ALLOWED_HOSTS: recipes.serguzim.me
  SECRET_KEY: "{{ vault_tandoor.secret_key }}"
  TZ: "{{ timezone }}"

  DB_ENGINE: django.db.backends.postgresql
  DB_OPTIONS: '{"sslmode": "require"}'
  POSTGRES_HOST: "{{ svc.db.host }}"
  POSTGRES_PORT: "{{ svc.db.port }}"
  POSTGRES_DB: "{{ svc.db.database }}"
  POSTGRES_USER: "{{ svc.db.user }}"
  POSTGRES_PASSWORD: "{{ svc.db.pass }}"

  SHOPPING_MIN_AUTOSYNC_INTERVAL: 5

  ENABLE_SIGNUP: 0
  ENABLE_METRICS: 1
  ENABLE_PDF_EXPORT: 1

  SOCIAL_DEFAULT_ACCESS: 1
  SOCIAL_DEFAULT_GROUP: guest

tandoor_compose:
  watchtower: true
  image: nginx:mainline-alpine
  volumes:
    - nginx_config:/etc/nginx/conf.d:ro
    - staticfiles:/static
    - mediafiles:/media
  file:
    services:
      web_recipes:
        image: vabene1111/recipes
        restart: always
        labels:
          com.centurylinklabs.watchtower.enable: true
        env_file:
          - service.env
        volumes:
          - staticfiles:/opt/recipes/staticfiles
          - nginx_config:/opt/recipes/nginx/conf.d
          - mediafiles:/opt/recipes/mediafiles
        networks:
          default:
    volumes:
      nginx_config:
      staticfiles:
      mediafiles: