---
# Matrix-deploy variant overrides. The LDAP
# variant is the canonical XMPP path because most clients only
# support SCRAM-SHA-256 over a real password store; the OIDC
# variant exists only to satisfy the auth-flow-variants
# requirement and runs the same ejabberd config with the OIDC
# marker raised.

# variant 0: OIDC variant (canonical default; ejabberd LDAP backend
# stays on, OIDC marker is on so Playwright runs the OIDC scenario).
- services:
    container_backup:
      enabled: true
    ldap:
      shared: true
      enabled: true
    sso:
      enabled: true
      shared: true
    prometheus:
      enabled: true
      shared: true
    tor:
      enabled: true

- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      shared: false # nocheck: variants-static-override backup shared stays literally true
      enabled: false
    sso:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true

- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      shared: true
      enabled: true
    sso:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true