oauth2_proxy:  
  application:        "proxy"
  port:               "80"
  acl:
    whitelist:
      - "/users/me"           # Necessary for Nextcloud Plugin to work
      - "/api/"               # Necessary for Nextcloud Plugin to work
      - "/oauth/token"        # Necessary for Nextcloud Plugin to work
ldap:
  filters:
    administrators:   True    # Set true to filter administrators
    users:            False   # Set true to filter users
features:
  matomo:             true
  css:                false   # Temporary deactivated. Needs to be optimized for production use.
  desktop:            true
  ldap:               true
  central_database:   true
  oauth2:             true
  logout:             true
server:
  csp:
    flags:
      script-src-elem:
        unsafe-inline: true
      style-src:
        unsafe-inline: true
    whitelist:
      font-src:
        - "data:"
  domains:
    canonical:
      - "project.{{ PRIMARY_DOMAIN }}"

docker:
  services:
    database:
      enabled: true
    web:
      name:     openproject-web
      image:    openproject/community
      version:  "13"    # Update when available. No rolling release implemented
      backup:
        no_stop_required: true
    seeder:
      name:     openproject-seeder
    cron:
      name:     openproject-cron
    worker:
      name:     openproject-worker
    proxy:
      name:     openproject-proxy
    cache:
      name:     openproject-cache
      image:    "" # If need a specific memcached image you have to define it here, otherwise the version from svc-db-memcached will be used
      version:  "" # If need a specific memcached version you have to define it here, otherwise the version from svc-db-memcached will be used
    
  volumes:
    data: "openproject_data"
