# @See https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/config_sample_php_parameters.html
# @See https://github.com/nextcloud/docker/blob/master/README.md

# Database Configuration
MYSQL_DATABASE=                 "{{ database_name }}"
MYSQL_USER=                     "{{ database_username }}"
MYSQL_PASSWORD=                 "{{ database_password }}"
MYSQL_HOST=                     "{{ database_host }}:{{ database_port }}"
      
# PHP
PHP_MEMORY_LIMIT=               "{{ applications | get_app_conf(application_id, 'performance.php.memory_limit') }}"
PHP_UPLOAD_LIMIT=               "{{ applications | get_app_conf(application_id, 'performance.php.upload_limit') }}"
PHP_OPCACHE_MEMORY_CONSUMPTION= "{{ applications | get_app_conf(application_id, 'performance.php.opcache_memory_consumption') }}"
      
# Email Configuration
SMTP_HOST=                      {{ SYSTEM_EMAIL.HOST }}
SMTP_SECURE=                    {{ 'ssl' if SYSTEM_EMAIL.TLS else '' }}
SMTP_PORT=                      {{ SYSTEM_EMAIL.PORT }}
SMTP_NAME=                      {{ users['no-reply'].email }}
SMTP_PASSWORD=                  {{ users['no-reply'].mailu_token }}

# Email from configuration
MAIL_FROM_ADDRESS=              "{{ users['no-reply'].username }}"
MAIL_DOMAIN=                    "{{ SYSTEM_EMAIL.DOMAIN }}"

# Initial Admin Data
NEXTCLOUD_ADMIN_USER=           "{{ NEXTCLOUD_ADMINISTRATOR_USER }}"
NEXTCLOUD_ADMIN_PASSWORD=       "{{ NEXTCLOUD_ADMINISTRATOR_PASSWORD }}"

# Security

NEXTCLOUD_TRUSTED_DOMAINS=      "{{ NEXTCLOUD_DOMAIN }}"
# Whitelist local docker gateway in Nextcloud to prevent brute-force throtteling
TRUSTED_PROXIES=                "{{ networks.internet.values() | select | join(',') }}"
OVERWRITECLIURL=                "{{ NEXTCLOUD_URL }}"
OVERWRITEPROTOCOL=              "{{ WEB_PROTOCOL }}"

# Redis Configuration
REDIS_HOST=                     redis
REDIS_PORT=                     6379

{% if NEXTCLOUD_TALK_ENABLED %}
# Talk Configuration
# @todo move it to an own env file for encapsulation reasons
NC_DOMAIN={{ NEXTCLOUD_DOMAIN }}
TALK_HOST={{ NEXTCLOUD_TALK_DOMAIN }}
TURN_SECRET={{ applications | get_app_conf(application_id, 'credentials.talk_turn_secret') }}
SIGNALING_SECRET={{ applications | get_app_conf(application_id, 'credentials.talk_signaling_secret') }}
INTERNAL_SECRET={{ applications | get_app_conf(application_id, 'credentials.talk_internal_secret') }}
TZ={{ HOST_TIMEZONE }}
TALK_PORT={{ NEXTCLOUD_TALK_INT_TURN_PORT }}
{% endif %}

{% if NEXTCLOUD_WHITEBOARD_ENABLED %}
# @todo move it to an own env file for encapsuling reasons
NEXTCLOUD_URL=                  "{{ NEXTCLOUD_URL }}"
JWT_SECRET_KEY=                 "{{ NEXTCLOUD_WHITEBOARD_JWT }}"
STORAGE_STRATEGY=redis
REDIS_URL=redis://redis:6379/0
{% endif %}