---
version: 1.1

network:

  incoming_ports:
    redefine: true
    default:
      - 2222

forgejo:
  description: Forgejo
  help: Git forge Forgejo

  title:
    description: Titre de la forge
    mode: basic
    default: 'Forgejo : Au-delà du développement. Nous forgeons.'

  mail_sender:
    description: Les courriels sont envoyés à partir de cet adresse
    examples:
      - admin@example.net
    type: mail

  secret_key:
    type: secret
    default:
      jinja: >-
        {{ "secret_key" |
          get_password(server_name=general.network.interface_0.domain_name,
                       description="forgejo",
                       type="cleartext",
                       hide=general.hide_secret,
                       length=105)
          }}
    hidden: true

  internal_token:
    type: secret
    default:
      jinja: >-
        {{ "internal_token" |
          get_password(server_name=general.network.interface_0.domain_name,
                       description="forgejo",
                       type="cleartext",
                       hide=general.hide_secret, length=105)
         }}
    hidden: true

  lfs_jwt_secret:
    type: secret
    default:
      jinja: >-
        {{ "lfs_jwt_secret" |
          get_password(server_name=general.network.interface_0.domain_name,
                       description="forgejo",
                       type="cleartext",
                       hide=general.hide_secret,
                       length=43)
         }}
    hidden: true

  jwt_secret:
    type: secret
    default:
      jinja: >-
        {{ "jwt_secret" |
          get_password(server_name=general.network.interface_0.domain_name,
                       description="forgejo",
                       type="cleartext",
                       hide=general.hide_secret,
                       length=43)
          }}
    hidden: true

revprox:

  client:

    local_location:
      redefine: true
      default: /

  client_port:
    redefine: true
    default: 3000

  client_cert_owner:
    redefine: true
    default: forgejo

redis:

  client:

    key_owner:
      redefine: true
      default: forgejo

oauth2:

  client:

    is_client_application:
      redefine: true
      default: true

    name:
      redefine: true
      default: Forge

    description:
      redefine: true
      default: Forge logiciel Forgejo

    category:
      redefine: true
      default: Développement

    logo:
      redefine: true
      default: silique_note.png

    login:
      redefine: true
      default:
        jinja: >-
          {{ general.revprox.client.external_domainnames |
               calc_oauth2_client_login(
                 general.revprox.client.location,
                 "user/oauth2/",
                 general.network.interface_0.domain_name,
                 "/callback"
                 )
            }}

    token_signature_algo:
      redefine: true
      default: RS256

    external:

      external:
        redefine: true
        default:
          jinja: |-
            {%- for domain in
             general.revprox.client.external_domainnames |
             calc_oauth2_client_external(
               general.revprox.client.location,
               "user/oauth2/",
               general.network.interface_0.domain_name)
               %}
            {{ domain }}
            {%- endfor -%}

postgresql:

  client:

    key_owner:
      redefine: true
      default: forgejo