# External NFS taskserv default values

let _presets = (import "schemas/lib/concerns_presets.ncl").presets in

{
  external_nfs | default = {
    mode     | default = 'taskserv,
    ip | default = "{{network_private_ip}}",
    net | default = "$net",
    shared | default = "/shared",
    operations | default = {
      install   = true,
      reinstall = true,
      delete    = true,
      health    = true,
    },
    live_check | default = {
      strategy = 'systemd,
      scope    = 'target,
      service  = "nfs-server",
    },

    # ServiceConcerns default — external NFS server; infrastructure_glue with custom tls/backup reasons.
    concerns | default = _presets.infrastructure_glue & {
      tls    | force = { kind = 'disabled, reason = "NFS protocol; no TLS termination at this layer" },
      backup | force = { kind = 'disabled, reason = "NFS share contents captured by per-consumer BackupPolicy at workspace level" },
    },
  },
}