CAP_NAME={{ taskserv.name }}
CAP_NAMESPACE={{ taskserv.namespace }}
CAP_IMAGE={{ taskserv.image }}:{{ taskserv.image_tag }}
CAP_HTTP_PORT={{ taskserv.http_port }}
CAP_DOMAIN={{ taskserv.domain }}
CAP_DNS_ZONE={{ taskserv.dns_zone }}
CAP_CLUSTER_ISSUER={{ taskserv.cluster_issuer }}
CAP_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
CAP_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
CAP_GATEWAY_IP={{ gateway_ip | default(value="") }}
CAP_CF_SECRET_NAME={{ cf_secret_name }}
CAP_TLS_SECRET={{ tls_secret }}
CAP_REDIS_URL={{ redis_url }}
CAP_VALKEY_IMAGE={{ taskserv.valkey_image | default(value="valkey/valkey") }}:{{ taskserv.valkey_image_tag | default(value="9-alpine") }}
CAP_VALKEY_STORAGE_CLASS={{ taskserv.valkey_storage_class | default(value="longhorn-retain") }}
CAP_VALKEY_STORAGE_SIZE={{ taskserv.valkey_storage_size | default(value="500Mi") }}
KUBECONFIG={{ taskserv.kubeconfig | default(value="/etc/kubernetes/admin.conf") }}
# TLS hook standard vars — consumed by lib/tls-hook-methods.sh
TLS_HOOK_CF_SECRET_NAME={{ cf_secret_name }}
TLS_HOOK_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
TLS_HOOK_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
TLS_HOOK_LISTENER_NAME=https-{{ taskserv.name }}
TLS_HOOK_DOMAIN={{ taskserv.domain }}
TLS_HOOK_TLS_SECRET={{ tls_secret }}
TLS_HOOK_NAMESPACE={{ taskserv.namespace }}
TLS_HOOK_CLUSTER_ISSUER={{ taskserv.cluster_issuer }}