FORGEJO_NAME={{ taskserv.name }}
FORGEJO_NAMESPACE={{ taskserv.namespace }}
FORGEJO_IMAGE={{ taskserv.image }}
FORGEJO_HTTP_PORT={{ taskserv.http_port | default(value=3000) }}
FORGEJO_SSH_PORT={{ taskserv.ssh_port | default(value=22) }}
FORGEJO_SSH_NODEPORT={{ taskserv.ssh_nodeport | default(value=32222) }}
FORGEJO_DOMAIN={{ taskserv.domain }}
FORGEJO_DNS_ZONE={{ taskserv.dns_zone }}
FORGEJO_CLUSTER_ISSUER={{ taskserv.cluster_issuer | default(value="letsencrypt-prod") }}
FORGEJO_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
FORGEJO_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
FORGEJO_GATEWAY_IP={{ gateway_ip | default(value="") }}
FORGEJO_CF_SECRET_NAME={{ cf_secret_name }}
FORGEJO_ACME_EMAIL={{ taskserv.acme_email | default(value="") }}
FORGEJO_REGISTRY_SECRET={{ taskserv.registry_secret | default(value="") }}
FORGEJO_STORAGE_CLASS={{ taskserv.storage_class | default(value="longhorn-retain") }}
FORGEJO_STORAGE_SIZE={{ taskserv.storage_size | default(value="20Gi") }}
FORGEJO_DB_HOST={{ taskserv.db_host }}
FORGEJO_DB_NAME={{ taskserv.db_name }}
FORGEJO_DB_USER={{ taskserv.db_user | default(value="forgejo") }}
FORGEJO_DB_PORT={{ taskserv.db_port | default(value=5432) }}
FORGEJO_DATA_DIR={{ taskserv.data_dir | default(value="/var/lib/gitea") }}
FORGEJO_REPOS_DIR={{ taskserv.repos_dir | default(value="/var/lib/gitea/git/repositories") }}
FORGEJO_ADMIN_USER={{ taskserv.admin_user | default(value="admin") }}
FORGEJO_ADMIN_EMAIL={{ taskserv.admin_email | default(value="") }}
FORGEJO_TLS_SECRET={{ tls_secret }}
KUBECONFIG={{ taskserv.kubeconfig | default(value="/etc/kubernetes/admin.conf") }}
# TLS hook standard vars — consumed by lib/tls-hook-methods.sh
TLS_HOOK_CF_SECRET_NAME={{ cf_secret_name }}
TLS_HOOK_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
TLS_HOOK_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
TLS_HOOK_LISTENER_NAME=https-{{ taskserv.name }}
TLS_HOOK_DOMAIN={{ taskserv.domain }}
TLS_HOOK_TLS_SECRET={{ tls_secret }}
TLS_HOOK_NAMESPACE={{ taskserv.namespace }}
TLS_HOOK_CLUSTER_ISSUER={{ taskserv.cluster_issuer | default(value="letsencrypt-prod") }}