{% include 'roles/sys-svc-container/templates/env.j2' %}

RAILS_ENV={{ ENVIRONMENT }}
RAILS_LOG_TO_STDOUT={{ MODE_DEBUG | lower }}
RAILS_SERVE_STATIC_FILES=true

SECRET_KEY_BASE={{ DECIDIM_SECRET_KEY_BASE }}
DATABASE_URL=postgresql://{{ lookup('database', application_id, 'username') }}:{{ lookup('database', application_id, 'password') | replace('/', '%2F') | replace('@', '%40') }}@{{ lookup('database', application_id, 'host') }}:{{ lookup('database', application_id, 'port') }}/{{ lookup('database', application_id, 'name') }}?sslmode=disable
REDIS_URL={{ lookup('engine', 'redis', application_id, 'url') }}/0

{% if lookup('objstore', application_id, 'enabled') | bool %}
STORAGE_PROVIDER=s3
AWS_BUCKET={{ lookup('objstore', application_id, 'bucket') }}
AWS_ACCESS_KEY_ID={{ lookup('objstore', application_id, 'access_key') }}
AWS_SECRET_ACCESS_KEY={{ lookup('objstore', application_id, 'secret_key') }}
AWS_ENDPOINT={{ lookup('objstore', application_id, 'public_url') | regex_replace('/[^/]+/?$', '') }}
AWS_REGION={{ lookup('objstore', application_id, 'region') }}
AWS_PUBLIC={{ lookup('objstore', application_id, 'public') | string | lower }}
{% endif %}

DECIDIM_APPLICATION_NAME={{ DECIDIM_ORGANIZATION_NAME }}
DECIDIM_FORCE_SSL={{ lookup('tls', application_id, 'enabled') | string | lower }}
DECIDIM_ALLOW_OPEN_REDIRECTS=false
PORT=3000
RAILS_HOSTS={{ lookup("tls", application_id, "url.base") | regex_replace("https?://", "") | regex_replace("/+$", "") }}
APPLICATION_HOST={{ lookup('tls', application_id, 'url.base') }}

LOG_LEVEL={% if MODE_DEBUG | bool %}debug{% else %}info{% endif %}

{% set email = lookup('email', application_id) %}
{% if email.enabled | bool %}
SMTP_ADDRESS={{ email.host }}
SMTP_PORT={{ email.port }}
SMTP_USERNAME={{ email.username }}
SMTP_PASSWORD={{ email.password | dotenv_quote }}
SMTP_AUTHENTICATION=login
SMTP_STARTTLS_AUTO={{ lookup('tls', application_id, 'enabled') | string | lower }}
MAILER_SENDER={{ DECIDIM_ORGANIZATION_NAME }} <{{ email['from'] }}>
{% endif %}

{% if DECIDIM_OIDC_ENABLED | bool %}
OIDC_ENABLED=true
OIDC_CLIENT_ID={{ DECIDIM_OIDC_CLIENT_ID }}
OIDC_CLIENT_SECRET={{ DECIDIM_OIDC_CLIENT_SECRET }}
OIDC_ISSUER={{ DECIDIM_OIDC_ISSUER }}
OIDC_AUTHORIZE_URL={{ DECIDIM_OIDC_AUTHORIZE_URL }}
OIDC_TOKEN_URL={{ DECIDIM_OIDC_TOKEN_URL }}
OIDC_USER_INFO_URL={{ DECIDIM_OIDC_USER_INFO_URL }}
{% endif %}