---
# Matrix-deploy variant overrides for this role. Variant 0 is the canonical OIDC variant
# (default), where Joomla speaks OIDC natively via the `plg_system_keycloak`
# plugin shipped under `files/joomla-oidc-plugin/`. Variant 1 flips
# to the LDAP variant: OIDC is disabled and Joomla's core LDAP
# authentication plugin against `svc-db-openldap` is the exercised
# auth path.
# See docs/contributing/artefact/files/role/variants.md for the file format.

# variant 0: OIDC variant (canonical default; native plg_system_keycloak).

- services:
    container_backup:
      enabled: true
    dashboard:
      enabled: true
      shared: true
    email:
      enabled: true
      shared: true
    logout:
      enabled: true
      shared: true
    mariadb:
      shared: true
    matomo:
      enabled: true
      shared: true
    sso:
      enabled: true
      shared: true
    prometheus:
      enabled: true
      shared: true
    css:
      enabled: true
      shared: true
    tor:
      enabled: true
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    css:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true