---
# Matrix-deploy variant overrides for this role. The OIDC variant rides the
# login-broker → social-app handoff behind the web-app-keycloak SSO-proxy
# sidecar (flavor: oauth2).
# See docs/contributing/artefact/files/role/variants.md for the file format.

# variant 0: OIDC variant (canonical default).

- services:
    container_backup:
      enabled: true
    dashboard:
      enabled: true
      shared: true
    email:
      enabled: true
      shared: true
    logout:
      enabled: true
      shared: true
    matomo:
      enabled: true
      shared: true
    sso:
      enabled: true
      shared: true
    prometheus:
      enabled: true
      shared: true
    css:
      enabled: true
      shared: true
    tor:
      enabled: true
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    css:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true