---
linkwarden_secret: "{{ vault_linkwarden.secret }}"

linkwarden_db_host_port: "{{ postgres.host }}:{{ postgres.port }}"
linkwarden_db_user: "{{ vault_linkwarden.db.user }}"
linkwarden_db_pass: "{{ vault_linkwarden.db.pass }}"
linkwarden_db_database: linkwarden

linkwarden_minio_accesskey: "{{ vault_linkwarden.minio.accesskey }}"
linkwarden_minio_secretkey: "{{ vault_linkwarden.minio.secretkey }}"

linkwarden_svc:
  domain: bookmarks.serguzim.me
  name: linkwarden
  port: 3000

linkwarden_env:
  NEXTAUTH_SECRET: "{{ linkwarden_secret }}"
  NEXTAUTH_URL: https://bookmarks.serguzim.me/api/v1/auth
  DATABASE_URL: postgres://{{ linkwarden_db_user }}:{{ linkwarden_db_pass }}@{{ linkwarden_db_host_port }}/{{ linkwarden_db_database }}

  SPACES_KEY: "{{ linkwarden_minio_accesskey }}"
  SPACES_SECRET: "{{ linkwarden_minio_secretkey }}"
  SPACES_ENDPOINT: https://s3.serguzim.me
  SPACES_BUCKET_NAME: linkwarden
  SPACES_REGION: de-contabo-1
  SPACES_FORCE_PATH_STYLE: true

  NEXT_PUBLIC_DISABLE_REGISTRATION: true
  NEXT_PUBLIC_CREDENTIALS_ENABLED: true
  NEXT_PUBLIC_AUTHENTIK_ENABLED: false
  AUTHENTIK_CUSTOM_NAME: auth.serguzim.me
  AUTHENTIK_ISSUER: https://auth.serguzim.me/application/o/bookmarks-serguzim-me
  AUTHENTIK_CLIENT_ID: "{{ vault_linkwarden.oidc_client.id }}"
  AUTHENTIK_CLIENT_SECRET: "{{ vault_linkwarden.oidc_client.secret }}"

linkwarden_compose:
  watchtower: true
  image: ghcr.io/linkwarden/linkwarden:latest