GLOBALS:
    bbb_url: https://talk.example.com/bigbluebutton/
    bbb_secret: your_super_secret_password
    turn_url: "turns:talk.example.com:5349?transport=tcp"
    turn_secret: your_super_secret_password
    basic_auth_password: your_super_secret_password
    loki_url: https://loki.monitoring.example.com/loki/api/v1/push
    basic_auth_hash: your_super_secret_password
authentik:
    env:
        EXTRA_DOMAINS: ', `example.com`'
        DEFAULT_LANGUAGE: de
        APPLICATIONS: '{"Calendar": "https://nextcloud.example.com/apps/calendar/", "BBB": "https://nextcloud.example.com/apps/bbb"}'
    uncomment:
        - calendar.svg
        - bbb.jpg
    execute:
       - worker set_admin_pass
       - worker apply_blueprints
       - worker add_applications
       - local set_icons
nextcloud:
    env: 
        DEFAULT_QUOTA: "100 MB"
        APPS: "calendar"
        BBB_URL: "{{bbb_url}}"
    uncomment:
        - compose.apps.yml
        - SECRET_BBB_SECRET_VERSION
    secrets:
        bbb_secret: "{{bbb_secret}}"
    execute:
        - app install_bbb
        - app set_default_quota
        - app install_apps
        - app run_occ 'app:disable dashboard'
wordpress:
    env:
        LOCALE: 'de_DE'
        DEFAULT_USER_ROLE: administrator
    uncomment:
        - EXTRA_DOMAINS
    execute:
        - app core_install
matrix-synapse:
    env: 
        ENCRYPTED_BY_DEFAULT: off
        TURN_URIS: '[{{turn_url}}]'
        RETENTION_MAX_LIFETIME: 2y
        ALLOWED_LIFETIME_MAX: 2y
    uncomment:
        - POST_DEPLOY_CMDS
        - compose.turn.yml
        - TURN_ENABLED
        - TURN_ALLOW_GUESTS
        - SECRET_TURN_SHARED_SECRET_VERSION
    secrets:
        turn_shared_secret: "{{turn_secret}}"
wekan:
    uncomment:
        - PASSWORD_LOGIN_ENABLED
backup-bot-two:
    uncomment:
        - SECRET_AWS_SECRET_ACCESS_KEY_VERSION
        - compose.s3.yml
onlyoffice:
    env:
        AUTO_ASSEMBLY_ENABLED: "true"     
outline:
    env:
        DEFAULT_LANGUAGE: de_DE
hedgedoc:
    env:
        CMD_ALLOW_ANONYMOUS: true
        CMD_ALLOW_ANONYMOUS_EDITS: true
        CMD_ALLOW_FREEURL: true
        CMD_COOKIE_POLICY: none
traefik:
    env:
        DASHBOARD_ENABLED: false
        METRICS_ENABLED: 1
        BASIC_AUTH: 1
    secrets:
        usersfile: "{{basic_auth_hash}}"
    uncomment:
        - compose.host.yml
        - compose.metrics.yml
        - compose.basicauth.yml
        - SECRET_USERSFILE_VERSION
monitoring-ng:
    env:
        LOKI_PUSH_URL: "{{loki_url}}"
    uncomment:
        - compose.promtail.yml
        - SECRET_BASIC_AUTH_VERSION
    secrets:
        basic_auth: "{{basic_auth_password}}"
gitea:
    uncomment:
        - compose.forgejo.yml
        - compose.postgres.yml
        - GITEA_REPO_INDEXER_ENABLED
        - GITEA_ISSUE_INDEXER_TYPE
        - GITEA_STARTUP_TIMEOUT
    comment:
        - compose.mariadb.yml