ADMIN_PASSWORD={{ MATRIX_ADMINISTRATOR_PASSWORD | dotenv_quote }}

ADMIN_USERNAME={{ MATRIX_ADMINISTRATOR_USERNAME | dotenv_quote }}

APP_BASE_URL={{ lookup('tls', application_id, 'url.base') | dotenv_quote }}

BIBER_PASSWORD={{ lookup('users', 'biber').password | dotenv_quote }}

BIBER_USERNAME={{ lookup('users', 'biber').username | dotenv_quote }}

BRIDGES_SERVICE_ENABLED={{ (MATRIX_BRIDGE.values() | list | select | list | length > 0) | string | lower }}

CANONICAL_DOMAIN={{ lookup('domains', application_id).element | dotenv_quote }}

ELEMENT_BASE_URL={{ lookup('canonical_url', application_id, 'element') | dotenv_quote }}

ELEMENT_CALL_SERVICE_ENABLED={{ MATRIX_CONFERENCING_ELEMENT_CALL | string | lower }}

# nocheck: playwright-service-gate — covered by sys-svc-mail integration tests, not the persona surface
EMAIL_SERVICE_ENABLED={{ lookup('config', application_id, 'services.email.enabled') | string | lower }}

JITSI_BASE_URL={{ (lookup('tls', 'web-app-jitsi', 'url.base') if MATRIX_JITSI_SHARED else lookup('canonical_url', application_id, 'jitsi')) | dotenv_quote }}

JITSI_SERVICE_ENABLED={{ MATRIX_JITSI_ENABLED | string | lower }}
JITSI_SSO_ENABLED={{ (MATRIX_JITSI_SHARED and lookup('config', 'web-app-jitsi', 'services.sso.enabled') | bool) | string | lower }}

# nocheck: playwright-service-gate — persona drives OIDC path; LDAP federation exercised in LDAP-only matrix variant
LDAP_SERVICE_ENABLED={{ lookup('config', application_id, 'services.ldap.enabled') | string | lower }}

LITELLM_SERVICE_ENABLED={{ lookup('config', application_id, 'services.litellm.enabled') | string | lower }}

# nocheck: playwright-service-gate — consumed via shared persona helpers (roles/test-e2e-playwright/files/personas/)
LOGOUT_SERVICE_ENABLED={{ lookup('config', application_id, 'services.logout.enabled') | string | lower }}

MATOMO_BASE_URL={{ lookup('tls', 'web-app-matomo', 'url.base') | dotenv_quote }}

# nocheck: playwright-service-gate — consumed via shared persona helpers (roles/test-e2e-playwright/files/personas/)
MATOMO_SERVICE_ENABLED={{ lookup('config', application_id, 'services.matomo.enabled') | string | lower }}

MATRIX_BASE_URL={{ lookup('canonical_url', application_id, 'synapse') | dotenv_quote }}

MATRIX_CHATGPT_BRIDGE_ENDPOINT={{ MATRIX_CHATGPT_BRIDGE_ENDPOINT | dotenv_quote }}

MATRIX_CHATGPT_BRIDGE_MODEL={{ MATRIX_CHATGPT_BRIDGE_MODEL | dotenv_quote }}

MATRIX_FLAVOR={{ lookup('config', application_id, 'services.matrix.flavor') | dotenv_quote }}

MATRIX_LIVEKIT_JWT_PATH={{ MATRIX_LIVEKIT_JWT_PATH | dotenv_quote }}

MATRIX_LIVEKIT_PATH={{ MATRIX_LIVEKIT_PATH | dotenv_quote }}

MATRIX_PLUGINS_JSON={{ MATRIX_BRIDGE | to_json | dotenv_quote }}

MATRIX_SERVER_NAME={{ MATRIX_SERVER_NAME | dotenv_quote }}

OIDC_ISSUER_URL={{ OIDC.CLIENT.ISSUER_URL | dotenv_quote }}

SEAWEEDFS_ADMIN_PASSWORD={{ MATRIX_ADMINISTRATOR_PASSWORD | dotenv_quote }}

SEAWEEDFS_ADMIN_USERNAME={{ MATRIX_ADMINISTRATOR_USERNAME | dotenv_quote }}

SEAWEEDFS_APP_BUCKET={{ lookup('objstore', application_id, 'bucket') | dotenv_quote }}

SEAWEEDFS_FILER_URL={{ lookup('canonical_url', 'web-app-seaweedfs', 'filer', consumer=application_id) | dotenv_quote }}

SEAWEEDFS_SERVICE_ENABLED={{ lookup('config', application_id, 'services.seaweedfs.enabled') | string | lower }}

SEAWEEDFS_FRONTEND_SERVICE_ENABLED={{ lookup('config', 'web-app-seaweedfs', 'services.frontend.enabled', false) | string | lower }}

SSO_SERVICE_ENABLED={{ lookup('config', application_id, 'services.sso.enabled') | string | lower }}

{% for bridge in MATRIX_BRIDGES | default([], true) %}
MAUTRIX_{{ bridge.bridge_name | upper | regex_replace('[^A-Z0-9]+', '_') }}_ADDON_ENABLED=true
{% endfor %}