---
# Matrix-deploy variant overrides for this role. Postmarks has no first-party OIDC or
# LDAP integration, both auth-flow variants ride the same
# the `web-app-keycloak` SSO-proxy sidecar (flavor: oauth2) sidecar in front of the Postmarks web UI.
# Variant 0 is the canonical OIDC variant (Keycloak with local
# user storage). Variant 1 flips the LDAP marker so Playwright's
# `LDAP_SERVICE_ENABLED` gate fires; the underlying user storage
# is then federated from `svc-db-openldap` through Keycloak.
# See docs/contributing/artefact/files/role/variants.md for the file format.

# variant 0: OIDC variant (canonical default).

- services:
    dashboard:
      enabled: true
      shared: true
    logout:
      enabled: true
      shared: true
    matomo:
      enabled: true
      shared: true
    sso:
      enabled: true
      shared: true
    prometheus:
      enabled: true
      shared: true
    css:
      enabled: true
      shared: true
    tor:
      enabled: true
- services:
    dashboard:
      enabled: false
      shared: false
    logout:
      enabled: false
      shared: false
    matomo:
      enabled: false
      shared: false
    sso:
      enabled: false
      shared: false
    prometheus:
      enabled: false
      shared: false
    css:
      enabled: false
      shared: false
    tor:
      enabled: true