# env-lian_node — rendered from workspace NCL by the provisioning Tera pipeline.
# Source: workspaces/<ws>/infra/<infra>/components/lian_node.ncl

LIAN_NODE_LOGICAL_ID="{{ taskserv.logical_id }}"
LIAN_NODE_TARGET_SERVER="{{ taskserv.target_server }}"
LIAN_NODE_PRIVATE_IP="{{ taskserv.private_ip }}"

BUILDKIT_VERSION="{{ taskserv.buildkit_version | default(value="v0.29.0") }}"
SCCACHE_VERSION="{{ taskserv.sccache_version | default(value="v0.9.1") }}"
NUSHELL_VERSION="{{ taskserv.nushell_version | default(value="0.112.2") }}"
JUST_VERSION="{{ taskserv.just_version | default(value="1.51.0") }}"
ORAS_VERSION="{{ taskserv.oras_version | default(value="1.3.2") }}"

BUILDKIT_ROOT="{{ taskserv.storage.buildkit_root | default(value="/var/lib/buildkit") }}"
SCCACHE_DISK_PATH="{{ taskserv.storage.sccache_disk_path | default(value="/var/cache/sccache") }}"

# TLS — certs delivered by fleet-agent install_tls (cert-manager, adr-009).
BUILDKIT_TLS_DOMAIN="{{ taskserv.tls.domain }}"
BUILDKIT_TLS_CERT_PATH="{{ taskserv.tls.cert_path }}"
BUILDKIT_TLS_CA_PATH="{{ taskserv.tls.ca_path | default(value="/etc/buildkit/tls/ca.crt") }}"
BUILDKIT_TLS_KEY_PATH="{{ taskserv.tls.key_path }}"
BUILDKIT_TCP_LISTEN_PORT="{{ taskserv.tls.tcp_listen_port | default(value=1234) }}"

# Swap policy — driven by NCL `swap` block. mode ∈ {file|disabled|preserve}.
SWAP_MODE="{{ taskserv.swap.mode | default(value="preserve") }}"
SWAP_SIZE_GB="{{ taskserv.swap.size_gb | default(value=8) }}"
SWAP_PATH="{{ taskserv.swap.path | default(value="/swapfile") }}"
SWAP_SWAPPINESS="{{ taskserv.swap.swappiness | default(value=10) }}"
SWAP_VFS_CACHE_PRESSURE="{{ taskserv.swap.vfs_cache_pressure | default(value=50) }}"