oauth2_proxy:  
  application:        "proxy"
  port:               "80"
  acl:
    whitelist:
      - "/users/me"           # Necessary for Nextcloud Plugin to work
      - "/api/"               # Necessary for Nextcloud Plugin to work
      - "/oauth/token"        # Necessary for Nextcloud Plugin to work
ldap:
  filters:
    administrators:   False   # Set true to filter administrators
    users:            False   # Set true to filter users
features:
  matomo:             true
  css:                false   # Temporary deactivated. Needs to be optimized for production use.
  desktop:            true
  ldap:               true
  central_database:   true
  oauth2:             true
  logout:             true
server:
  csp:
    flags:
      script-src-elem:
        unsafe-inline: true
      style-src:
        unsafe-inline: true
    whitelist:
      font-src:
        - "data:"
  domains:
    canonical:
      - "open.project.{{ PRIMARY_DOMAIN }}"
    aliases: []
docker:
  services:
    database:
      enabled: true
    web:
      name:               openproject-web
      image:              openproject/community
      version:            "13"    # Update when available. No rolling release implemented
      backup:
        no_stop_required: true
      cpus:               "1.0"
      mem_reservation:    "1.5g"
      mem_limit:          "2g"
      pids_limit:         512
    seeder:
      name:               openproject-seeder
      cpus:               "0.3"
      mem_reservation:    "256m"
      mem_limit:          "512m"
      pids_limit:         256
    cron:
      name:               openproject-cron
      cpus:               "0.3"
      mem_reservation:    "256m"
      mem_limit:          "512m"
      pids_limit:         256
    worker:
      name:             openproject-worker
      cpus:             "0.8"
      mem_reservation:  "1g"
      mem_limit:        "1.5g"
      pids_limit:       512
    proxy:
      name:     openproject-proxy
      cpus:               "0.3"
      mem_reservation:    "256m"
      mem_limit:          "512m"
      pids_limit:         256
    cache:
      name:               openproject-cache
      image:              "" # If need a specific memcached image you have to define it here, otherwise the version from svc-db-memcached will be used
      version:            "" # If need a specific memcached version you have to define it here, otherwise the version from svc-db-memcached will be used
      cpus:               "0.3"
      mem_reservation:    "256m"
      mem_limit:          "512m"
      pids_limit:         256
    
  volumes:
    data:                 "openproject_data"