all:
  hosts:
    test-vps:
      ansible_host: 178.104.35.59
      ansible_user: root
      ansible_ssh_pass: "{{ vault_ansible_become_pass }}"
      #ansible_ssh_private_key_file: ~/.ssh/id_ed25519

  vars:
    # Docker
    docker_network: church-website-net

    # PostgreSQL
    postgres_container_name: postgres
    postgres_image: postgis/postgis:16-3.4
    postgres_volume: pgdata

    # Databases
    databases:
      - name: church_website_staging
        user: church_website_staging
        password: "{{ vault_db_password_staging }}"
      - name: church_website_test
        user: church_website_test
        password: "{{ vault_db_password_test }}"

    # Caddy
    caddy_domains:
      - domain: mutter-teresa.skick.app
        proxy_port: 3001
      - domain: mutter-teresa-test.skick.app
        proxy_port: 3002
      - domain: git.skick.app
        proxy_port: 3003

    # Chemnitz domains: served by Caddy as the static countdown page until go-live.
    # The setup/caddy role renders them in countdown mode (chemnitz_live defaults
    # to false). Run playbooks/switch-to-staging.yml to flip them to the staging
    # app (port 3001) and reload Caddy. Point DNS at this VPS first so Caddy can
    # obtain TLS for each name.
    countdown_domains:
      - hl-mutter-teresa-chemnitz.de
      - www.hl-mutter-teresa-chemnitz.de
    countdown_live_port: 3001   # staging app port the domains proxy to once live

    # Forgejo
    forgejo_domain: git.skick.app
    forgejo_container_name: forgejo
    forgejo_port: 3003
    forgejo_ssh_port: 2222

    # App environments
    app_environments:
      - name: staging
        port: 3001
        domain: mutter-teresa.skick.app
        db_name: church_website_staging
        db_user: church_website_staging
        db_password: "{{ vault_db_password_staging }}"
        payload_secret: "{{ vault_payload_secret_staging }}"
        site_id: chemnitz
        google_bucket: "{{ vault_google_bucket }}"
        resend_api_key: "{{ vault_resend_api_key }}"
      - name: test
        port: 3002
        domain: mutter-teresa-test.skick.app
        db_name: church_website_test
        db_user: church_website_test
        db_password: "{{ vault_db_password_test }}"
        payload_secret: "{{ vault_payload_secret_test }}"
        site_id: chemnitz
        google_bucket: "{{ vault_google_bucket }}"
        resend_api_key: "{{ vault_resend_api_key }}"

    # Repo
    repo_dir: /opt/church-website/repo
    envs_dir: /opt/church-website/envs
    scripts_dir: /opt/church-website/scripts
    repo_url: "{{ vault_repo_url }}"
    repo_branch: staging