_speedup_bitwarden_hetzner_record: "{{ bitwarden_records_urmel_services['Hetzner'] }}"
_speedup_bitwarden_hetzner_fields: "{{ dict(_speedup_bitwarden_hetzner_record.fields|map(attribute='name')|zip(_speedup_bitwarden_hetzner_record.fields|map(attribute='value'))) }}"

_speedup_noreply_mail_record: "{{ bitwarden_records_urmel_services['Noreply Mail'] }}"
_speedup_noreply_mail_fields: "{{ dict(_speedup_noreply_mail_record.fields|map(attribute='name')|zip(_speedup_noreply_mail_record.fields|map(attribute='value'))) }}"

_speedup_nextcloud_record: "{{ bitwarden_records_urmel_services['Nextcloud'] }}"
_speedup_nextcloud_fields: "{{ dict(_speedup_nextcloud_record.fields|map(attribute='name')|zip(_speedup_nextcloud_record.fields|map(attribute='value'))) }}"

_speedup_smb_provicer_record: "{{ bitwarden_records_urmel_services['SMB Provider'] }}"

_smb_credentials: "username={{ _speedup_smb_provicer_record.login.username }},password={{ _speedup_smb_provicer_record.login.password }},domain=WORKGROUP"

ddns_override:
  domains:
    - provider: "hetznercloud"
      domain: "urmel.de"
      ip_version: "ipv4"
      token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
    - provider: "hetznercloud"
      domain: "urmel.de"
      ip_version: "ipv6"
      token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
    - provider: "hetznercloud"
      domain: "*.urmel.de"
      ip_version: "ipv4"
      token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
    - provider: "hetznercloud"
      domain: "*.urmel.de"
      ip_version: "ipv6"
      token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"

traefik_override:
  expose_additional_ports:
    - 2022
  include_external_services:
    homeassistant:
      url: 172.24.2.4


  main_domain: "urmel.de"
  http_port: "80"
  https_port: "443"

  duckdns_api_token: "{{ (bitwarden_records_urmel_services['DuckDns'].fields | selectattr('name', '==', 'token') | first).value }}"
  hetzner_api_token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
  basic_auth_password: "{{ (bitwarden_records_urmel_services['Traefik'].fields | selectattr('name', '==', 'auth_string') | first).value }}"

authentik_override:
  url: "auth.urmel.de"
  db_password: "{{ (bitwarden_records_urmel_services['Authentik'].fields | selectattr('name', '==', 'db_password') | first).value }}"
  secret: "{{ (bitwarden_records_urmel_services['Authentik'].fields | selectattr('name', '==', 'secret') | first).value }}"
  mail:
    host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
    user: "{{ _speedup_noreply_mail_fields.address }}"
    password: "{{ _speedup_noreply_mail_fields.password }}"
  radius:
    enabled: false


nextcloud_override:
  url: "nextcloud.urmel.de"
  data_path: "/mnt/nextcloud"
  db_password: "{{ _speedup_nextcloud_fields.db_password }}"
  secret: "{{ _speedup_nextcloud_fields.secret }}"
  secret_salt: "{{ _speedup_nextcloud_fields.salt }}"

  networkmount:
    host: "217.100.0.2"
    host_path: "/mnt/Main/nextcloudData"
    args: "rw,noatime,tcp"

  mail:
    host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
    address: "{{ _speedup_noreply_mail_fields.address }}"
    password: "{{ _speedup_noreply_mail_fields.password }}"

  oidc:
    issuer: "https://auth.urmel.de/application/o/nextcloud/.well-known/openid-configuration"
    client_id: "{{ _speedup_nextcloud_fields.oidc_client_id }}"
    client_secret: "{{ _speedup_nextcloud_fields.oidc_client_secret }}"


  collabora:
    url: "collabora.urmel.de"
    password: "{{ _speedup_nextcloud_fields.collabora_password }}"
  drawio:
    url: "drawio.urmel.de"

vaultwarden_override:
  url: "vaultwarden.urmel.de"
  admin_token: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'admin_token') | first).value }}"
  oidc:
    issuer: ""
    client_id: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'oidc_client_id') | first).value }}"
    client_secret: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'oidc_client_secret') | first).value }}"

  mail:
    host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
    user: "{{ _speedup_noreply_mail_fields.address }}"
    password: "{{ _speedup_noreply_mail_fields.password }}"

jellyfin_override:
  url: "jellyfin.urmel.de"
  data_path: "/mnt/jellyfin"
  networkmount:
    host: "217.100.0.2"
    host_path: "/mnt/Main/jellyfinData"
    args: "rw,noatime,tcp"

gitea_override:
  version: "1.23.7"
  url: "git.urmel.de"
  db_password: "{{ (bitwarden_records_urmel_services['Gitea'].fields | selectattr('name', '==', 'db_password') | first).value }}"
  data_path: "/mnt/gitea"
  enable_ssh: true
  networkmount:
    host: "217.100.0.2"
    host_path: "giteaData"
    args: "{{ _smb_credentials }},uid=1000,gid=1000"
    type: "cifs"

minio_override:
  version: "1.0.1"
  url: "s3.urmel.de"
  admin_url: "rustfs.urmel.de"
  user: "{{ bitwarden_records_urmel_services['Minio'].login.username }}"
  password: "{{ bitwarden_records_urmel_services['Minio'].login.password }}"
  data_path: "/mnt/rustfs"
  networkmount:
    host: "217.100.0.2"
    host_path: "servicesData/s3"
    args: "{{ _smb_credentials }},uid=10001,gid=10001"
    type: "cifs"

splitpro_override:
  url: "splitpro.urmel.de"
  db_password: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'db_password') | first).value }}"
  nextauth_secret: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'nextauth_secret') | first).value }}"
  oidc:
    client_id: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'oidc_client_id') | first).value }}"
    client_secret: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'oidc_client_secret') | first).value }}"
    issuer: "https://auth.urmel.de/application/o/split-pro/"
  mail:
    host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
    address: "{{ _speedup_noreply_mail_fields.address }}"
    password: "{{ _speedup_noreply_mail_fields.password }}"

changedetection_override:
  version: "latest"
  url: "changedetection.urmel.de"
  oidc:
    forwardauth_url: "http://authentik-proxy:9000/outpost.goauthentik.io/auth/traefik"