{% include 'roles/sys-svc-container/templates/env.j2' %}

DOMAIN={{ lookup('domain',application_id) }}
RUN_MODE={{ 'dev' if (ENVIRONMENT | lower) == 'development' else 'prod' }}
ROOT_URL={{ lookup('tls', application_id, 'url.base') }}
APP_NAME={{ lookup('config', application_id, 'services.gitea.title') }}
USER_UID=1000
USER_GID=1000

GITEA__log__MODE=console
GITEA__log__LEVEL={% if MODE_DEBUG | bool %}Debug{% else %}Info{% endif %}

DB_TYPE=mysql
DB_HOST={{ lookup('database', application_id, 'host') }}:{{ lookup('database', application_id, 'port') }}
DB_NAME={{ lookup('database', application_id, 'name') }}
DB_USER={{ lookup('database', application_id, 'username') }}
DB_PASSWD={{ lookup('database', application_id, 'password') }}
GITEA__database__DB_TYPE=mysql
GITEA__database__HOST={{ lookup('database', application_id, 'host') }}:{{ lookup('database', application_id, 'port') }}
GITEA__database__NAME={{ lookup('database', application_id, 'name') }}
GITEA__database__USER={{ lookup('database', application_id, 'username') }}
GITEA__database__PASSWD={{ lookup('database', application_id, 'password') }}
GITEA__database__MAX_OPEN_CONNS=50
GITEA__database__MAX_IDLE_CONNS=25
GITEA__database__CONN_MAX_LIFETIME=1h

{% if GITEA_REDIS_ENABLED | bool %}
{% set _redis_auth = ':' ~ GITEA_REDIS_PASSWORD ~ '@' if GITEA_REDIS_PASSWORD else '' %}
{% set _redis_session_pw = ',password=' ~ GITEA_REDIS_PASSWORD if GITEA_REDIS_PASSWORD else '' %}

GITEA__cache__ENABLED=true
GITEA__cache__ADAPTER=redis
GITEA__cache__HOST=redis://{{ _redis_auth }}{{ GITEA_REDIS_ADDRESS }}/1

GITEA__session__PROVIDER=redis
GITEA__session__PROVIDER_CONFIG=network=tcp,addr={{ GITEA_REDIS_ADDRESS }},db=2{{ _redis_session_pw }},pool_size=100,idle_timeout=180

GITEA__queue__TYPE=redis
GITEA__queue__CONN_STR=redis://{{ _redis_auth }}{{ GITEA_REDIS_ADDRESS }}/3
{% endif %}

{% if lookup('objstore', application_id, 'enabled') | bool %}
GITEA__storage__STORAGE_TYPE=minio
GITEA__storage__MINIO_ENDPOINT={{ lookup('objstore', application_id, 'endpoint') }}
GITEA__storage__MINIO_BUCKET={{ lookup('objstore', application_id, 'bucket') }}
GITEA__storage__MINIO_ACCESS_KEY_ID={{ lookup('objstore', application_id, 'access_key') }}
GITEA__storage__MINIO_SECRET_ACCESS_KEY={{ lookup('objstore', application_id, 'secret_key') }}
GITEA__storage__MINIO_USE_SSL=false
GITEA__storage__MINIO_LOCATION={{ lookup('objstore', application_id, 'region') }}
{% endif %}

SSH_PORT={{lookup('config', application_id, 'services.gitea.ports.public.ssh')}}
SSH_LISTEN_PORT=22
SSH_DOMAIN={{ lookup('domain',application_id) }}

{% set email = lookup('email', application_id) %}
{% if email.enabled | bool %}
GITEA__mailer__ENABLED=true
GITEA__mailer__FROM={{ email['from'] }}
GITEA__mailer__PROTOCOL=smtps
GITEA__mailer__SMTP_ADDR={{ email.host }}
GITEA__mailer__SMTP_PORT={{ email.port }}
GITEA__mailer__USER={{ email.username }}
GITEA__mailer__PASSWD={{ email.password }}
{% endif %}

GITEA__REPOSITORY__ENABLE_PUSH_CREATE_USER={{ lookup('config', application_id, 'services.gitea.configuration.repository.enable_push_create_user') | lower }}
GITEA__REPOSITORY__DEFAULT_PRIVATE={{ lookup('config', application_id, 'services.gitea.configuration.repository.default_private') | lower }}
GITEA__REPOSITORY__DEFAULT_PUSH_CREATE_PRIVATE={{ lookup('config', application_id, 'services.gitea.configuration.repository.default_push_create_private') | lower }}

GITEA__security__INSTALL_LOCK=true

GITEA__openid__ENABLE_OPENID_SIGNUP={{ GITEA_OIDC_ENABLED | lower }}
GITEA__openid__ENABLE_OPENID_SIGNIN={{ GITEA_OIDC_ENABLED | lower }}

{% if GITEA_IAM_ENABLED | bool %}

EXTERNAL_USER_DISABLE_FEATURES=deletion,manage_credentials,change_username,change_full_name

{% if ( GITEA_LDAP_ENABLED | bool ) %}
GITEA__ldap__SYNC_USER_ON_LOGIN=true
{% endif %}

{% endif %}

GITEA__service__DISABLE_REGISTRATION={{ GITEA_IAM_ENABLED | lower }}

{% if lookup('config', application_id, 'services.prometheus.native_metrics.enabled', False) | bool %}
GITEA__metrics__ENABLED=true
{% set _metrics_token = lookup('config', application_id, 'secrets.credentials.native_metrics_token', '') %}
{% if _metrics_token %}
GITEA__metrics__TOKEN={{ _metrics_token }}
{% endif %}
{% endif %}