31 lines
1.7 KiB
Text
31 lines
1.7 KiB
Text
|
WEBAPP_NAME={{ taskserv.name }}
|
||
|
|
WEBAPP_NAMESPACE={{ taskserv.namespace }}
|
||
|
|
WEBAPP_IMAGE={{ taskserv.image | default(value="nginx") }}:{{ taskserv.image_tag | default(value="1.27-alpine") }}
|
||
|
|
WEBAPP_DOMAIN={{ taskserv.domain }}
|
||
|
|
WEBAPP_DNS_ZONE={{ taskserv.dns_zone }}
|
||
|
|
WEBAPP_CLUSTER_ISSUER={{ taskserv.cluster_issuer | default(value="letsencrypt-prod") }}
|
||
|
|
WEBAPP_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
|
||
|
|
WEBAPP_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
|
||
|
|
WEBAPP_GATEWAY_IP={{ gateway_ip | default(value="") }}
|
||
|
|
WEBAPP_CF_SECRET_NAME={{ cf_secret_name }}
|
||
|
|
WEBAPP_ACME_EMAIL={{ taskserv.acme_email | default(value="") }}
|
||
|
|
WEBAPP_STORAGE_SIZE={{ taskserv.storage_size | default(value="2Gi") }}
|
||
|
|
WEBAPP_DATA_DIR={{ taskserv.data_dir | default(value="/usr/share/nginx/html") }}
|
||
|
|
WEBAPP_TLS_SECRET={{ tls_secret }}
|
||
|
|
WEBAPP_AUTH_PATH_COUNT={{ taskserv.auth_paths | length }}
|
||
|
|
{% for ap in taskserv.auth_paths %}
|
||
|
|
WEBAPP_AUTH_PATH_{{ loop.index0 }}_PATH={{ ap.path }}
|
||
|
|
WEBAPP_AUTH_PATH_{{ loop.index0 }}_SLUG={{ ap.slug }}
|
||
|
|
WEBAPP_AUTH_PATH_{{ loop.index0 }}_REALM={{ ap.realm | default(value="Restricted") }}
|
||
|
|
{% endfor %}
|
||
|
|
KUBECONFIG={{ taskserv.kubeconfig | default(value="/etc/kubernetes/admin.conf") }}
|
||
|
|
# TLS hook standard vars — consumed by lib/gateway-tls.sh
|
||
|
|
TLS_HOOK_CF_SECRET_NAME={{ cf_secret_name }}
|
||
|
|
TLS_HOOK_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
|
||
|
|
TLS_HOOK_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
|
||
|
|
TLS_HOOK_LISTENER_NAME=https-{{ taskserv.name }}
|
||
|
|
TLS_HOOK_DOMAIN={{ taskserv.domain }}
|
||
|
|
TLS_HOOK_TLS_SECRET={{ tls_secret }}
|
||
|
|
TLS_HOOK_NAMESPACE={{ taskserv.namespace }}
|
||
|
|
TLS_HOOK_CLUSTER_ISSUER={{ taskserv.cluster_issuer | default(value="letsencrypt-prod") }}
|