---
redis:
  modes:
    compose:
      enabled: true
    swarm:
      enabled: true
  # nocheck: default-placement-manager  central cache engine, node-local on-disk state (ACL file + optional AOF), single-node until redis replication is in scope
  placement: manager
  bond: 1
  enabled: true
  shared: true
  image: redis
  name: redis-central
  version: 8.10.3-alpine
  min_storage: 238MB
  backup:
    disabled: true
  cpus: "0.5"
  mem_reservation: "128m"
  mem_limit: "512m"
  pids_limit: 512
  ports:
    local:
      redis: 6379
    internal:
      redis: 6379
    onion:
      # nocheck: onion-flag  the shared cache and queue runs without AUTH inside the stack, so its reachability must stay bounded by the role network
      redis: false
  lifecycle: beta
# nocheck: variants-coverage — sso-variant-tor requires the onion on in every variant, so the false polarity has no variant left to live in
tor:
  bond: 0.5
  enabled: "{{ 'svc-net-tor' in group_names }}"
  shared: true # nocheck: dynamic-flag

# nocheck: dynamic-flag - the redis volume is backup-disabled ephemeral cache state, the backup consumer stays permanently off
container_backup:
  enabled: false
  shared: true