# Static extras for the swarm-NFS test pipeline; runtime-only values
# come from `utils.tests.swarm.write.extras`.
# nocheck: hardcoded-dns-resolver — `1.1.1.1` is the upstream the
# in-cluster simulated containers use; the host-network DNS-resolver
# SPOT does not apply inside act-DinD nested containers.
---
ASYNC_ENABLED: true
MODE_DEBUG: true
TLS_MODE: "self_signed"

networks:
  internet:
    ip4: "{{ lookup('env', 'INFINITO_SWARM_MGR_IP') }}"
    ip6: "::1"
    dns: "{{ NETWORK_PUBLIC_DNS_RESOLVERS | first }}"

NETWORK_CONTAINER_BRIDGE_RESOLVER: true

storage:
  backend: nfs

SVC_STORAGE_NFS_SERVER_STATE_ALLOWED_CIDRS:
  - "192.168.244.0/24" # nocheck: hardcoded-subnet (act swarm-lab subnet; nodes + controller mount the fsid=0 state export from it)

SVC_STORAGE_NFS_SERVER_MINOR_VERSIONS: "{{ lookup('env', 'INFINITO_SWARM_NFS_MINOR_VERSIONS') | default('0, 1, 2', true) }}" # nocheck: swarm-only inventory; evaluated on the CI runner where load.sh exports it, never inside the compose DiD

MAIL_PRODUCTION_HOST: "{{ lookup('env', 'INFINITO_MAIL_PRODUCTION_HOST') | default('', true) }}"
MAIL_PRODUCTION_RESOLVER: "{{ lookup('env', 'INFINITO_MAIL_PRODUCTION_RESOLVER') | default('', true) }}"

swarm:
  network:
    encryption: true
  registry:
    port: 5000

RUNNER_SRC_DIR: "{{ lookup('env', 'INFINITO_NODE_SRC_DIR') }}" # nocheck: swarm-only inventory; evaluated on the CI runner where load.sh exports it, never inside the compose DiD