---
# Sample inventory for CI Pipeline.
#
# Per-application overrides MUST live in the role itself under
# `roles/<role>/meta/variants.yml` (one entry per matrix-deploy
# variant). The dev init step at `cli/administration/deploy/development/init.py`
# materialises one inventory folder per round (`<dir>-0`, `<dir>-1`,
# ...; or just `<dir>` when there is a single round) with the active
# variant baked into each folder's host_vars. The matching deploy step
# iterates those folders and purges only the apps whose variant changed
# between rounds. This file holds only the cross-cutting environment
# knobs.
MASK_CREDENTIALS_IN_LOGS: false
ASYNC_ENABLED: false
MODE_DEBUG: true
ENVIRONMENT: development
TLS_ENABLED: true
TLS_MODE: "self_signed"

DOMAIN_PRIMARY: "{{ lookup('env', 'INFINITO_DOMAIN') }}"
BUILDKIT_ENABLED: "{{ lookup('env', 'INFINITO_BUILDKIT_ENABLED') | bool }}"
INFINITO_IMAGE_TAG: "{{ lookup('env', 'INFINITO_IMAGE_TAG') | default('latest', true) }}"
INFINITO_GHCR_MIRROR_PREFIX: "{{ lookup('env', 'INFINITO_GHCR_MIRROR_PREFIX') | default('', true) }}"
CA_CONTAINER_ENABLED: "{{ lookup('env', 'INFINITO_CONTAINER_CA_ENABLED') | bool }}"
test_e2e_playwright_keep: "{{ lookup('env', 'INFINITO_PLAYWRIGHT_KEEP') | bool }}"
MAIL_PRODUCTION_HOST: "{{ lookup('env', 'INFINITO_MAIL_PRODUCTION_HOST') | default('', true) }}"
MAIL_PRODUCTION_RESOLVER: "{{ lookup('env', 'INFINITO_MAIL_PRODUCTION_RESOLVER') | default('', true) }}"
SYS_TIMEOUT_CONTAINER_EXEC: "60min"
networks:
  internet:
    ip4: "{{ lookup('env', 'INFINITO_IP4') }}"
    ip6: "{{ lookup('env', 'INFINITO_IP6') }}"
    dns: "{{ lookup('env', 'INFINITO_DNS_IP') }}"

design:
  css:
    colors:
      base: "#FFA500"

API:
  openai:
    api_key: "{{ lookup('env', 'INFINITO_API_OPENAI_KEY') }}"
  anthropic:
    api_key: "{{ lookup('env', 'INFINITO_API_ANTHROPIC_KEY') }}"
  openrouter:
    api_key: "{{ lookup('env', 'INFINITO_API_OPENROUTER_KEY') }}"

OIDC_OVERRIDE:
  CLIENT:
    SECRET: VERYUNSAFESAMPLEPASSWORD1234
PLAYWRIGHT_MAPACHE_PASSWORD: "VeryUnsecureMapache!1"
users:
  administrator:
    authorized_keys:
      - ssh-ed25519 AAAA_TEST_DUMMY_KEY github-ci-dummy@infinito
    password: "'$tr0ng€xampl3PW!"
  biber:
    username: "biber"
    firstname: "Harry"
    lastname: "Beaver"
    website: "https://www.infinito.nexus/"
    email: "biber@{{ DOMAIN_PRIMARY }}"
    gpg: "DUMMY-GPG-KEY-NOT-SET"
    password: "VeryUnsecurePassword!1"

    uid: 10001
    gid: 10001
    accounts: ["mailbox", "identity"]
    roles: []
    tokens: {}
    authorized_keys: []
SIZE_PERCENT_CLEANUP_DISC_SPACE: 99 # Exception: set this high because the DinD CI environment in the GitHub workflow can already sit at ~92% disk usage.

WORKSTATION_USER: biber