let _presets = (import "schemas/lib/concerns_presets.ncl").presets in

{
  ontoref_panel | default = {
    name                      | default = "ontoref-panel",
    namespace                 | default = "ontoref-panel",
    image                     | default = "reg.librecloud.online/lamina/ontoref-panel:latest",
    port                      | default = 8090,
    node                      | default = "",
    panel_enabled             | default = "",
    panel_ncl_path            | default = "config/panel.ncl",
    panel_token_secret        | default = "ontoref-panel-token",
    mail_namespace            | default = "mail",
    mail_pvc                  | default = "docker-mailserver-mail-data",
    mail_data_subpath         | default = "config",
    mail_pod_selector         | default = "app.kubernetes.io/name=docker-mailserver",
    mail_container            | default = "docker-mailserver",
    wg_easy_url               | default = "",
    wg_easy_secret            | default = "wg-easy-password",
    cloudflare_secret         | default = "cloudflare-dns-credentials",
    private_gateway_name      | default = "private-gateway",
    private_gateway_namespace | default = "kube-system",
    private_gateway_hostname  | default = "",

    operations | default = {
      install = true,
      update  = true,
      delete  = true,
      health  = true,
    },

    live_check | default = {
      strategy = 'k8s_pods,
      scope    = 'cp_only,
    },

    concerns | default = _presets.infrastructure_glue & {
      backup | force = {
        kind   = 'disabled,
        reason = "stateless panel daemon — no runtime data; panel.ncl config is in git",
      },
    },
  },
}