# Alliance Boréale - Forgejo Configuration
# Generated by Ansible - DO NOT EDIT MANUALLY
# Host: {{ inventory_hostname }}
# Date: {{ ansible_date_time.iso8601 }}

APP_NAME = L'Alliance Boréale - Forge Git
RUN_MODE = prod
RUN_USER = {{ forgejo.user }}

[server]
DOMAIN = {{ forgejo.hostname }}
HTTP_PORT = {{ forgejo.http_port }}
ROOT_URL = https://{{ forgejo.hostname }}/
DISABLE_SSH = false
SSH_DOMAIN = {{ forgejo.hostname }}
SSH_PORT = {{ forgejo.ssh_port }}
SSH_LISTEN_PORT = {{ forgejo.ssh_port }}
START_SSH_SERVER = true
LFS_START_SERVER = {{ forgejo.features.enable_lfs | lower }}
OFFLINE_MODE = false

[database]
DB_TYPE = {{ forgejo.db.type }}
HOST = {{ forgejo.db.host }}
NAME = {{ forgejo.db.name }}
USER = {{ forgejo.db.user }}
PASSWD = {{ forgejo.db.password }}
SSL_MODE = {{ forgejo.db.ssl_mode }}
CHARSET = utf8mb4
LOG_SQL = false

[repository]
ROOT = {{ forgejo.data_dir }}/repositories
DEFAULT_BRANCH = main
PREFERRED_LICENSES = MIT,Apache-2.0,GPL-3.0
DISABLE_HTTP_GIT = false
ACCESS_CONTROL_ALLOW_ORIGIN = https://{{ forgejo.hostname }}

[security]
INSTALL_LOCK = true
SECRET_KEY = {{ forgejo.secret_key }}
INTERNAL_TOKEN = {{ forgejo.internal_token }}
PASSWORD_HASH_ALGO = argon2
MIN_PASSWORD_LENGTH = 12

[service]
DISABLE_REGISTRATION = {{ forgejo.features.disable_registration | lower }}
REQUIRE_SIGNIN_VIEW = {{ forgejo.features.require_signin | lower }}
REGISTER_EMAIL_CONFIRM = false
ENABLE_NOTIFY_MAIL = false
DEFAULT_KEEP_EMAIL_PRIVATE = true
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
DEFAULT_ENABLE_TIMETRACKING = true
NO_REPLY_ADDRESS = noreply@{{ forgejo.domain }}

[mailer]
ENABLED = false

[session]
PROVIDER = file
PROVIDER_CONFIG = {{ forgejo.data_dir }}/sessions

[picture]
DISABLE_GRAVATAR = false
ENABLE_FEDERATED_AVATAR = false

[log]
MODE = console, file
LEVEL = Info
ROOT_PATH = {{ forgejo.log_dir }}

[git]
MAX_GIT_DIFF_LINES = 10000
MAX_GIT_DIFF_LINE_CHARACTERS = 5000
MAX_GIT_DIFF_FILES = 100

[actions]
ENABLED = {{ forgejo.features.enable_actions | lower }}

[packages]
ENABLED = {{ forgejo.features.enable_packages | lower }}

{% if forgejo.oauth.enabled %}
# OAuth2 / OpenID Connect (Keycloak)
[oauth2_client]
REGISTER_EMAIL_CONFIRM = false
ENABLE_AUTO_REGISTRATION = true
USERNAME = preferred_username
UPDATE_AVATAR = true
ACCOUNT_LINKING = auto

{% for provider in forgejo.oauth.providers %}
[oauth2.{{ provider.name }}]
ENABLED = true
PROVIDER = {{ provider.provider }}
CLIENT_ID = {{ provider.client_id }}
CLIENT_SECRET = {{ provider.client_secret }}
OPENID_CONNECT_AUTO_DISCOVERY_URL = {{ provider.openid_connect_auto_discovery_url }}
{% endfor %}
{% endif %}