WEBSITE_NAME={{ taskserv.name }}
WEBSITE_NAMESPACE={{ taskserv.namespace }}
WEBSITE_IMAGE={{ taskserv.image }}:{{ taskserv.image_tag | default(value="latest") }}
WEBSITE_PORT={{ taskserv.port | default(value=3000) }}
WEBSITE_DOMAIN={{ taskserv.domain }}
WEBSITE_DNS_ZONE={{ taskserv.dns_zone }}
WEBSITE_CLUSTER_ISSUER={{ taskserv.cluster_issuer | default(value="letsencrypt-prod") }}
WEBSITE_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
WEBSITE_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
WEBSITE_GATEWAY_IP={{ gateway_ip | default(value="") }}
WEBSITE_CF_SECRET_NAME={{ cf_secret_name }}
WEBSITE_ACME_EMAIL={{ taskserv.acme_email | default(value="") }}
WEBSITE_REGISTRY_SECRET={{ taskserv.registry_secret | default(value="regcred") }}
WEBSITE_DATA_PVC_ENABLED={{ taskserv.data_pvc.enabled | default(value=false) }}
WEBSITE_DATA_MOUNT={{ taskserv.data_pvc.mount_path | default(value="/app/data") }}
WEBSITE_TLS_SECRET={{ tls_secret }}
KUBECONFIG={{ taskserv.kubeconfig | default(value="/etc/kubernetes/admin.conf") }}
# TLS hook standard vars — consumed by lib/tls-hook-methods.sh
TLS_HOOK_CF_SECRET_NAME={{ cf_secret_name }}
TLS_HOOK_GATEWAY_NAME={{ taskserv.gateway_name | default(value="libre-wuji") }}
TLS_HOOK_GATEWAY_NS={{ taskserv.gateway_ns | default(value="kube-system") }}
TLS_HOOK_LISTENER_NAME=https-{{ taskserv.name }}
TLS_HOOK_DOMAIN={{ taskserv.domain }}
TLS_HOOK_TLS_SECRET={{ tls_secret }}
TLS_HOOK_NAMESPACE={{ taskserv.namespace }}
TLS_HOOK_CLUSTER_ISSUER={{ taskserv.cluster_issuer | default(value="letsencrypt-prod") }}