---
# Shared test variables for all Molecule scenarios.
# Loaded via vars_files in each role's converge.yml.

molecule_test_mode: true
sovereign_base_dir: /tmp/sovereign_test

# Branding
base_domain: test.example.com
tenant_name: "Test Corp"
tenant_primary_color: "#2563eb"
tenant_accent_color: "#1e40af"
tenant_logo_local_path: ""

# Graylog logging (referenced in every docker-compose template)
graylog_host: "127.0.0.1"
graylog_gelf_port: 12201
sovereign_network_name: sovereign

# SMTP
smtp_host: stalwart
smtp_port: 587
smtp_from: "noreply@test.example.com"
smtp_user: "noreply@test.example.com"
smtp_password: "test_smtp_password"
smtp_tls: starttls

# Traefik
traefik_acme_email: "admin@test.example.com"
traefik_domain: "traefik.test.example.com"
traefik_dashboard_password: "test_traefik_dash"
traefik_version: "v3.1"
traefik_data_dir: /tmp/sovereign_test/traefik

# Authentik
authentik_domain: "auth.test.example.com"
authentik_version: "2024.10.5"
authentik_secret_key: "test-secret-key-exactly-50-chars-padded-here12345"
authentik_db_password: "test_authentik_db"
authentik_admin_email: "admin@test.example.com"
authentik_admin_password: "test_authentik_admin"
authentik_data_dir: /tmp/sovereign_test/authentik

# Graylog
graylog_domain: "logs.test.example.com"
graylog_version: "6.0"
graylog_password_secret: "test_graylog_secret_min_16_chars"
graylog_root_password_sha2: "test_sha256_placeholder"
graylog_data_dir: /tmp/sovereign_test/graylog

# Stalwart
stalwart_domain: "mail.test.example.com"
stalwart_admin_password: "test_stalwart_admin"
stalwart_version: "latest"
stalwart_data_dir: /tmp/sovereign_test/stalwart

# Roundcube
roundcube_domain: "webmail.test.example.com"
roundcube_version: "latest"
roundcube_db_password: "test_roundcube_db"
roundcube_des_key: "test_24_char_des_key____!"
roundcube_data_dir: /tmp/sovereign_test/roundcube

# Wazuh
wazuh_domain: "wazuh.test.example.com"
wazuh_version: "4.9.0"
wazuh_admin_password: "test_wazuh_admin"
wazuh_api_password: "test_wazuh_api"
wazuh_indexer_memory: "512m"
wazuh_data_dir: /tmp/sovereign_test/wazuh

# Headscale
headscale_domain: "headscale.test.example.com"
headscale_version: "0.23.0"
wireguard_domain: "vpn.test.example.com"
wireguard_port: 51820
headscale_noise_private_key: ""
headscale_data_dir: /tmp/sovereign_test/headscale

# Matrix / Element
matrix_domain: "matrix.test.example.com"
element_domain: "chat.test.example.com"
matrix_version: "v1.118.0"
matrix_registration_secret: "test_registration_secret"
matrix_db_password: "test_matrix_db"
element_theme: "light"
matrix_data_dir: /tmp/sovereign_test/matrix

# Jitsi
jitsi_domain: "meet.test.example.com"
jitsi_version: "stable-9753"
jitsi_jicofo_auth_password: "test_jicofo"
jitsi_jvb_auth_password: "test_jvb"
jitsi_jibri_recorder_password: "test_jibri_recorder"
jitsi_jibri_xmpp_password: "test_jibri_xmpp"
jitsi_turn_secret: "test_turn"
jitsi_data_dir: /tmp/sovereign_test/jitsi

# MinIO
minio_domain: "s3.test.example.com"
minio_console_domain: "minio.test.example.com"
minio_version: "latest"
minio_root_user: "minioadmin"
minio_root_password: "test_minio"
minio_nextcloud_bucket: "nextcloud"
minio_nextcloud_access_key: "nextcloud"
minio_nextcloud_secret_key: "test_nextcloud_s3"
minio_data_dir: /tmp/sovereign_test/minio

# Nextcloud
nextcloud_domain: "cloud.test.example.com"
nextcloud_version: "29"
nextcloud_admin_user: "admin"
nextcloud_admin_password: "test_nextcloud"
nextcloud_db_password: "test_nextcloud_db"
nextcloud_db_root_password: "test_nextcloud_db_root"
nextcloud_data_dir: /tmp/sovereign_test/nextcloud

# Vaultwarden
vaultwarden_domain: "vault.test.example.com"
vaultwarden_version: "latest"
vaultwarden_admin_token: "test_vaultwarden_admin_token"
vaultwarden_db_password: "test_vaultwarden_db"
vaultwarden_data_dir: /tmp/sovereign_test/vaultwarden

# Forgejo
forgejo_domain: "git.test.example.com"
forgejo_version: "latest"
forgejo_db_password: "test_forgejo_db"
forgejo_secret_key: "test_forgejo_secret"
forgejo_internal_token: "test_forgejo_internal_token"
forgejo_lfs_jwt_secret: "test_forgejo_lfs_jwt"
forgejo_admin_user: "admin"
forgejo_admin_password: "test_forgejo_admin"
forgejo_admin_email: "admin@test.example.com"
forgejo_ssh_port: 2222
forgejo_data_dir: /tmp/sovereign_test/forgejo

# Website
website_nginx_version: "alpine"
website_data_dir: /tmp/sovereign_test/website