---
# Matrix-deploy variant overrides for this role.
# See docs/contributing/artefact/files/role/variants.md for the file format.
#
# `ldap` is pinned in `services.yml` (`enabled: true`, `shared: true`)
# because LDAP IS the storage backend for LAM — every variant inherits
# it, so the variant blocks below don't override it.

# variant 0: development credentials so the Playwright admin
# scenario can sign in without an out-of-band password handoff.
- secrets:
    credentials:
      administrator_password: "'$tr0ng€xampl3PW!"
  services:
    dashboard:
      enabled: true
      shared: true
    logout:
      enabled: true
      shared: true
    matomo:
      enabled: true
      shared: true
    sso:
      enabled: true
      shared: true
    prometheus:
      enabled: true
      shared: true

    css:
      enabled: true
      shared: true
    tor:
      enabled: true
- services:
    dashboard:
      enabled: false
      shared: false
    logout:
      enabled: false
      shared: false
    matomo:
      enabled: false
      shared: false
    sso:
      enabled: false
      shared: false
    prometheus:
      enabled: false
      shared: false

    css:
      enabled: false
      shared: false
    tor:
      enabled: true
  secrets:
    credentials:
      administrator_password: "'$tr0ng€xampl3PW!"
- services:
    sso:
      enabled: false
      shared: false
    css:
      enabled: false
      shared: false
    dashboard:
      enabled: false
      shared: false
    logout:
      enabled: false
      shared: false
    matomo:
      enabled: false
      shared: false
    prometheus:
      enabled: false
      shared: false
    tor:
      enabled: true