---
application_id: "web-app-moodle"
entity_name: "{{ application_id | get_entity_name }}"
swarm_stack_converge_retries: 600

MOODLE_CODE_DIR: "{{ lookup('volume', 'web-app-moodle', 'code').target }}"
MOODLE_DATA_DIR: "{{ lookup('volume', 'web-app-moodle', 'data').target }}"
MOODLE_LOCAL_CACHE_DIR: "{{ lookup('volume', application_id, 'localcache').mounts[0].target }}"
MOODLE_SOURCE_DIR: "/opt/moodle-source"
MOODLE_ENTRYPOINT_PATH: "/usr/local/bin/moodle-entrypoint.sh"

MOODLE_BUILD_DIR: "build"
MOODLE_BUILD_FILES:
  entrypoint: "moodle-entrypoint.sh"
  config_php: "config.php"
  install_source: "install/moodle-source.sh"
  install_oidc: "install/auth-oidc.sh"
  install_mcp: "install/webservice-mcp.sh"
  opcache_ini: "php-conf/opcache-recommended.ini"
  runtime_ini: "php-conf/moodle-runtime.ini"
  fpm_pool: "php-conf/zz-moodle-pool.conf"
MOODLE_PUBLIC_SUBDIR: "public"
MOODLE_PUBLIC_DIR: "{{ [MOODLE_CODE_DIR, MOODLE_PUBLIC_SUBDIR] | path_join }}"
MOODLE_VERSION_FILE: "{{ [MOODLE_PUBLIC_SUBDIR, 'version.php'] | path_join }}"
MOODLE_AUTH_SUBDIR: "{{ [MOODLE_PUBLIC_SUBDIR, 'auth'] | path_join }}"
MOODLE_WEBSERVICE_SUBDIR: "{{ [MOODLE_PUBLIC_SUBDIR, 'webservice'] | path_join }}"
MOODLE_CLI_RELPATH: "admin/cli" # admin CLI script dir

MOODLE_OIDC_PLUGIN_VERSION: "{{ lookup('config', application_id, 'addons.auth_oidc.version') }}"
MOODLE_OIDC_PLUGIN_UPSTREAM: "{{ lookup('config', application_id, 'addons.auth_oidc.update.upstream_id') }}"
MOODLE_OIDC_PLUGIN_ARCHIVE_URL: "https://github.com/{{ MOODLE_OIDC_PLUGIN_UPSTREAM }}/archive/refs/tags/{{ MOODLE_OIDC_PLUGIN_VERSION }}.zip"
MOODLE_OIDC_PLUGIN_URL_PATH: "auth/oidc"
MOODLE_OIDC_PLUGIN_RELPATH: "{{ [MOODLE_PUBLIC_SUBDIR, MOODLE_OIDC_PLUGIN_URL_PATH] | path_join }}"
MOODLE_OIDC_PLUGIN_DIR: "{{ [MOODLE_CODE_DIR, MOODLE_OIDC_PLUGIN_RELPATH] | path_join }}"
MOODLE_CLI_DIR: "{{ [MOODLE_CODE_DIR, MOODLE_CLI_RELPATH] | path_join }}"
MOODLE_CONFIG: "{{ [MOODLE_CODE_DIR, 'config.php'] | path_join }}"

MOODLE_RUNTIME_USER: "www-data"
MOODLE_RUNTIME_USER_GROUP: "{{ MOODLE_RUNTIME_USER }}:{{ MOODLE_RUNTIME_USER }}"

MOODLE_ADMIN_USERNAME: "{{ lookup('users', 'administrator').username }}"
MOODLE_ADMIN_PASSWORD: "{{ lookup('users', 'administrator').password }}"
MOODLE_ADMIN_EMAIL: "{{ lookup('users', 'administrator').email }}"

MOODLE_RELEASE: "{{ lookup('config', application_id, 'services.moodle.app_version') }}"
MOODLE_TARBALL_URL: "https://github.com/moodle/moodle/archive/refs/tags/v{{ MOODLE_RELEASE }}.tar.gz"

MOODLE_MSMTP_SRC: "{{ lookup('path_absolute', 'roles/sys-svc-mail-msmtp/templates/msmtprc.conf.j2') }}"
MOODLE_MSMTP_ABS: "{{ [ lookup('container', application_id, 'directories.config'), 'msmtprc.conf'] | path_join }}"

MOODLE_IMAGE: "{{ lookup('config', application_id, 'services.moodle.image') }}"
MOODLE_VERSION: "{{ lookup('config', application_id, 'services.moodle.version') }}"
MOODLE_CONTAINER: "{{ lookup('config', application_id, 'services.moodle.name') }}"
MOODLE_CONTAINER_ADDRESS: "{{ lookup('container_address', application_id, entity_name) }}"
MOODLE_DB_CONTAINER_ADDRESS: "{{ lookup('database', application_id, 'address') }}"
MOODLE_NGINX_CONTAINER: "{{ lookup('config', application_id, 'services.nginx.name') }}"
MOODLE_CRON_CONTAINER: "{{ lookup('config', application_id, 'services.cron.name') }}"

MOODLE_OIDC_ENABLED: "{{ lookup('config', application_id, 'services.sso.enabled') }}"
MOODLE_LDAP_ENABLED: "{{ lookup('config', application_id, 'services.ldap.enabled') }}"

MOODLE_LITELLM_ENABLED: "{{ lookup('config', application_id, 'services.litellm.enabled') | bool }}"
MOODLE_LITELLM_API_KEY: "{{ lookup('config', application_id, 'secrets.credentials.litellm_api_key') }}"
MOODLE_LITELLM_CHAT_ENDPOINT: "{{ LITELLM_OPENAI_BASE_LOCAL_URL }}/chat/completions"
MOODLE_LITELLM_IMAGE_ENDPOINT: "{{ LITELLM_OPENAI_BASE_LOCAL_URL }}/images/generations"
MOODLE_LITELLM_PROVIDER_NAME: "LiteLLM gateway"
MOODLE_LITELLM_PLACEMENTS:
  - aiplacement_courseassist
  - aiplacement_editor

MOODLE_EGRESS_BLOCKED_HOSTS:
  - "0.0.0.0"
  - "127.0.0.0/8"
  - "localhost"
  - "169.254.169.254"
  - "0000::1"
MOODLE_EGRESS_ALLOWED_PORTS:
  - "80"
  - "443"
MOODLE_EGRESS_NEWLINE: "\n"
MOODLE_EGRESS_SETTINGS:
  - name: curlsecurityblockedhosts
    value: "{{ MOODLE_EGRESS_BLOCKED_HOSTS | join(MOODLE_EGRESS_NEWLINE) }}"
  - name: curlsecurityallowedport
    value: "{{ (MOODLE_EGRESS_ALLOWED_PORTS + ([MOODLE_LITELLM_CHAT_ENDPOINT | urlsplit('port') | string] if MOODLE_LITELLM_ENABLED | bool else [])) | join(MOODLE_EGRESS_NEWLINE)
      }}"
MOODLE_DEBUG_SETTINGS:
  - name: debug
    value: "{{ (MODE_DEBUG | bool) | ternary('32767', '0') }}"
  - name: debugdisplay
    value: "{{ (MODE_DEBUG | bool) | ternary('1', '0') }}"

MOODLE_MCP_ENABLED: "{{ lookup('config', application_id, 'mcp.enabled') }}"
MOODLE_MCP_PLUGIN_VERSION: "v0.6.0"
MOODLE_MCP_PLUGIN_ARCHIVE_URL: "https://github.com/onbirdev/moodle-webservice_mcp/archive/refs/tags/{{ MOODLE_MCP_PLUGIN_VERSION }}.zip"
MOODLE_MCP_PLUGIN_RELPATH: "{{ [MOODLE_WEBSERVICE_SUBDIR, 'mcp'] | path_join }}"
MOODLE_MCP_PLUGIN_SOURCE_DIR: "{{ [MOODLE_SOURCE_DIR, MOODLE_MCP_PLUGIN_RELPATH] | path_join }}"
MOODLE_MCP_PLUGIN_DIR: "{{ [MOODLE_CODE_DIR, MOODLE_MCP_PLUGIN_RELPATH] | path_join }}"
MOODLE_MCP_SERVICE_KEY: "{{ lookup('config', application_id, 'mcp.endpoint.service_key') }}"
MOODLE_MCP_PORT: "{{ lookup('config', application_id, 'services.nginx.ports.internal.http') }}"
MOODLE_MCP_URL: "http://{{ MOODLE_MCP_SERVICE_KEY }}:{{ MOODLE_MCP_PORT }}{{ lookup('config', application_id, 'mcp.endpoint.path') }}"
MOODLE_MCP_EXTERNAL_SERVICE_NAME: "Model Context Protocol"
MOODLE_MCP_EXTERNAL_SERVICE_SHORTNAME: "infinito_mcp"
MOODLE_MCP_EXTERNAL_FUNCTIONS:
  - core_webservice_get_site_info
  - core_course_get_courses
  - core_enrol_get_users_courses
  - core_user_get_users_by_field
  - core_calendar_get_calendar_events
MOODLE_MCP_ACCOUNT: "{{ lookup('users', 'mcp-web-app-moodle') }}"
MOODLE_MCP_ACCOUNT_USERNAME: "{{ MOODLE_MCP_ACCOUNT.username }}"
MOODLE_MCP_ACCOUNT_EMAIL: "{{ MOODLE_MCP_ACCOUNT.email }}"
MOODLE_MCP_ACCOUNT_PASSWORD: "{{ MOODLE_MCP_ACCOUNT.password }}"
MOODLE_MCP_ROLE_SHORTNAME: "infinito_mcp"
MOODLE_MCP_ROLE_NAME: "Infinito MCP service"
MOODLE_MCP_ROLE_CAPABILITIES:
  - webservice/mcp:use
  - webservice/rest:use
  - moodle/course:view
  - moodle/user:viewdetails
MOODLE_MCP_TOOLS_LIST_PAYLOAD:
  jsonrpc: "2.0"
  id: 1
  method: tools/list
  params: {}
MOODLE_OIDC_CUSTOM_SCOPE: "{{ lookup('config', 'web-app-keycloak', 'services.keycloak.scopes.moodle') }}"
MOODLE_OIDC_SCOPES: "openid profile email phone address {{ MOODLE_OIDC_CUSTOM_SCOPE }}"

MOODLE_SITE_TITLE: "{{ lookup('config', application_id, 'services.moodle.site_titel') }}"

MOODLE_FPM_PORT: "{{ lookup('config', application_id, 'services.moodle.ports.internal.fpm') }}"
MOODLE_NGINX_PORT: "{{ lookup('config', application_id, 'services.moodle.ports.internal.http') }}"

MOODLE_PHP_MEMORY_LIMIT: "{{ lookup('service_memory_mb', application_id, 'moodle', 0.25) }}M"
MOODLE_PHP_UPLOAD_MAX_FILESIZE: "{{ lookup('config', application_id, 'services.moodle.performance.php.upload_max_filesize') }}"
MOODLE_PHP_POST_MAX_SIZE: "{{ lookup('config', application_id, 'services.moodle.performance.php.post_max_size') }}"
MOODLE_PHP_MAX_EXECUTION_TIME: "300"
MOODLE_PHP_MAX_INPUT_VARS: "5000"