---
version: 1.1

roundcube:  # Interface web de consultation des courriels Roundcube

  des_key:
    type: secret
    default:
      jinja: >-
        {{ "roundcube" |
          get_password(server_name=general.network.interface_0.domain_name,
                       description="des_key",
                       type="cleartext",
                       hide=general.hide_secret)
          }}
    auto_save: false
    hidden: true

  config:
    type: unix_filename
    multi: true
    default:
      jinja: |-
        {%- for domain in _.domain.domains %}
        /etc/roundcubemail/{{ domain }}.inc.php
        {%- endfor -%}
    hidden: true

  domain:
    type: leadership

    domains:
      description: Nom de domaines d'accès à Roundcube
      examples:
        - webmail.example.net
      type: domainname
      multi: true

    mail_domain:
      description: Nom de domaines des courriels
      examples:
        - mail.example.net
      type: domainname

    family:
      description: Nom de la famille
      type: unix_user
      mandatory: false

oauth2:

  client:

    is_client_application:
      redefine: true
      default: true

    name:
      redefine: true
      default: Courriel

    description:
      redefine: true
      default: Consulter ces courriels avec Roundcube

    category:
      redefine: true
      default: Diffusion

    logo:
      redefine: true
      default: silique_email.png

    external:

      family:
        redefine: true
        multi: true
        default:
          jinja: |-
            {%- for family in general.roundcube.domain.family
                            | calc_oauth2_families %}
            {{ family }}
            {%- endfor -%}

nginx:

  root:
    redefine: true
    default: /usr/share/roundcubemail/

revprox:

  client:

    external_domainnames:
      redefine: true
      default:
        variable: general.roundcube.domain.domains
      hidden: true

    local_location:
      redefine: true
      default: /

imap:

  cert_owner:
    redefine: true
    default: nginx

ldap:

  client:

    family:
      redefine: true
      default:
        jinja: >-
          {%- if general.roundcube.domain.family -%}
            {%- if general.roundcube.domain.family | unique | list | length > 1 -%}
            all
            {%- else -%}
            {{ general.roundcube.domain.family[0] }}
            pouet
            {%- endif -%}
          {%- endif -%}
      hidden: true