{% include 'roles/sys-svc-container/templates/env.j2' %}

MINIO_ROOT_USER={{ lookup('users', 'administrator').username }}
MINIO_ROOT_PASSWORD={{ lookup('users', 'administrator').password | dotenv_quote }}

MINIO_SERVER_URL={{ MINIO_API_URL }}
MINIO_BROWSER_REDIRECT_URL={{ MINIO_CONSOLE_URL }}

{% if MINIO_LDAP_ENABLED | bool %}
MINIO_IDENTITY_LDAP_SERVER_ADDR={{ LDAP.SERVER.DOMAIN }}:{{ LDAP.SERVER.PORT }}

MINIO_IDENTITY_LDAP_SERVER_INSECURE={{ ('off' if (LDAP.SERVER.SECURITY | upper) in ['TLS','SSL'] else 'on') }}
MINIO_IDENTITY_LDAP_SERVER_STARTTLS={{ ('on' if (LDAP.SERVER.SECURITY | upper) == 'TLS' else 'off') }}
MINIO_IDENTITY_LDAP_TLS_SKIP_VERIFY=off

MINIO_IDENTITY_LDAP_LOOKUP_BIND_DN={{ LDAP.DN.ADMINISTRATOR.DATA }}
MINIO_IDENTITY_LDAP_LOOKUP_BIND_PASSWORD={{ LDAP.BIND_CREDENTIAL | dotenv_quote }}

MINIO_IDENTITY_LDAP_USER_DN_SEARCH_BASE_DN={{ LDAP.DN.ROOT }}
MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER=({{ LDAP.USER.ATTRIBUTES.ID }}=%s)
MINIO_IDENTITY_LDAP_GROUP_SEARCH_BASE_DN={{ LDAP.DN.ROOT }}
MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER=(&(objectClass=groupOfNames)(member=%d))
{% endif %}