{% include 'roles/sys-svc-container/templates/env.j2' %}

BASE_URL={{ lookup('tls', application_id, 'url.base') }}
DATABASE_URL=postgresql://{{ lookup('database', application_id, 'username') }}:{{ lookup('database', application_id, 'password') }}@{{ lookup('database', application_id, 'host') }}:{{ lookup('database', application_id, 'port') }}/{{ lookup('database', application_id, 'name') }}?sslmode=disable
JWT_SECRET={{ (application_id ~ lookup('users', 'administrator').password) | hash('sha256') }}

ALLOW_PRIVATE_NETWORK_TARGETS=true

{% if lookup('objstore', application_id, 'enabled') | bool %}
BLOB_STORAGE=s3
BLOB_STORAGE_S3_BUCKET={{ lookup('objstore', application_id, 'bucket') }}
BLOB_STORAGE_S3_ACCESS_KEY_ID={{ lookup('objstore', application_id, 'access_key') }}
BLOB_STORAGE_S3_SECRET_ACCESS_KEY={{ lookup('objstore', application_id, 'secret_key') }}
BLOB_STORAGE_S3_ENDPOINT_URL={{ lookup('objstore', application_id, 'url') }}
BLOB_STORAGE_S3_REGION={{ lookup('objstore', application_id, 'region') }}
{% endif %}

{% set email = lookup('email', application_id) %}
EMAIL_NOREPLY={{ email['from'] }}
EMAIL_SMTP_HOST={{ email.host }}
EMAIL_SMTP_PORT={{ email.port }}
EMAIL_SMTP_USERNAME={{ email.username }}
EMAIL_SMTP_PASSWORD={{ email.password | dotenv_quote }}
EMAIL_SMTP_ENABLE_STARTTLS={{ email.start_tls | lower }}