---
# Where the application build context is staged on the target host.
trade_hub_app_dir: /opt/trade-hub

# Install podman as part of this role. Leave false when another role (for
# example "packages") already provides podman.
trade_hub_install_podman: false

# Images. These are built locally by default; point them at a registry if you
# prefer to pull prebuilt images.
trade_hub_image_tag: latest
trade_hub_backend_image: localhost/sc-inventory-backend
trade_hub_frontend_image: localhost/sc-inventory-frontend
trade_hub_postgres_image: docker.io/library/postgres:16-alpine
trade_hub_build_images: true
trade_hub_force_rebuild: false

# Directories created under trade_hub_app_dir before the source is staged.
# ansible.builtin.copy does NOT create parent directories for single-file
# sources, so every directory a staged file lands in must exist first.
trade_hub_app_subdirs:
  - backend
  - backend/app
  - backend/scripts
  - frontend
  - frontend/src

# Container names. Kept compatible with the previous standalone playbook so an
# existing installation is upgraded in place.
trade_hub_db_container: sc-inventory-db
trade_hub_backend_container: sc-inventory-backend
trade_hub_frontend_container: sc-inventory-frontend

# Database.
trade_hub_postgres_user: sc_inventory
trade_hub_postgres_db: sc_inventory
trade_hub_postgres_password: "{{ lookup('env', 'POSTGRES_PASSWORD') | default(trade_hub_postgres_pw, true) }}"
trade_hub_database_url: "postgresql+psycopg://{{ trade_hub_postgres_user }}:{{ trade_hub_postgres_password }}@db:5432/{{ trade_hub_postgres_db }}"
trade_hub_db_wait_seconds: 60

# Networking.
trade_hub_network: sc-inventory
trade_hub_volume: sc-inventory-data
trade_hub_frontend_bind: 0.0.0.0
# Published on the host and used as the container's nginx listen port. Nginx
# Proxy Manager proxies to http://<trade_hub_frontend_ip>:<trade_hub_frontend_port>.
trade_hub_frontend_port: 8071
# Static address for the frontend on the shared npm_internal proxy network
# (created by the "network" role), so the proxy-manager upstream never changes.
trade_hub_frontend_ip: "10.10.0.5"
# Set to true (or "true") once the site is served over TLS.
trade_hub_cookie_secure: "false"

# Post-deploy health check.
trade_hub_healthcheck_url: "http://127.0.0.1:{{ trade_hub_frontend_port }}/healthz"
trade_hub_healthcheck_retries: 12
trade_hub_healthcheck_delay: 5

# The original standalone playbook removed an ad-hoc Apache container that
# used the same host. Disabled by default so the role never touches unrelated
# containers.
trade_hub_remove_legacy_apache: false
trade_hub_legacy_apache_container: my-apache-server

# Enable podman-restart.service so the containers come back after a reboot.
trade_hub_enable_restart_service: false