---
# nocheck: sso-variant-tor — meta/services.yml gates sso on
# "svc-net-tor not in group_names": the frontend is off on a tor node by design, so
# there is no SSO-over-onion flow to exercise.
- services:
    container_backup:
      enabled: true
    sso:
      enabled: "{{ 'svc-net-tor' not in group_names }}"
      shared: "{{ 'svc-net-tor' not in group_names }}"
    logout:
      enabled: "{{ 'svc-net-tor' not in group_names }}"
      shared: "{{ 'svc-net-tor' not in group_names }}"
    dashboard:
      enabled: "{{ 'svc-net-tor' not in group_names }}"
      shared: "{{ 'svc-net-tor' not in group_names }}"
    prometheus:
      enabled: "{{ 'svc-net-tor' not in group_names }}"
      shared: "{{ 'svc-net-tor' not in group_names }}"
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true