---

domain: "nextcloud.localhost"

system_user: "{{ domain | domain_to_username }}"

nextcloud_gpg_fingerprint: "28806A878AE423A28372792ED75899B9A724937A"
nextcloud_gpg_key_remote: "https://nextcloud.com/nextcloud.asc"
nextcloud_release_remote: "https://download.nextcloud.com/server/releases/latest.tar.bz2"
nextcloud_release_remote_checksum: "{{ nextcloud_release_remote }}.sha256"
nextcloud_release_remote_signature: "{{ nextcloud_release_remote }}.asc"

user_directory: "{{ global_webservers_directory }}/{{ domain }}"
nextcloud_installation_directory: "{{ user_directory }}/nextcloud" # directory name of inside downloaded tar zip
nextcloud_data_directory: "{{ user_directory }}/data"
scripts_directory: "{{ user_directory }}/scripts"

nextcloud_keyring: "{{ user_directory }}/nextcloud.gpg"
nextcloud_release_file: "{{ user_directory }}/nextcloud.tar.bz2"
nextcloud_release_signature: "{{ nextcloud_release_file }}.asc"
nextcloud_config: "{{ nextcloud_installation_directory }}/config/config.php"
import_config_file: "{{ nextcloud_installation_directory }}/config/config.json"

status_page_path: "{{ phpfpm_status_page_path }}"
status_page_acl: "{{ nginx_status_page_acl }}"

database_user: "{{ system_user }}"
# database_pass from mysql/database
# database_name from mysql/database

# redis_socket_path from redis/instance

nextcloud_admin_user: "admin"
nextcloud_admin_pass: "{{ lookup('password', 'credentials/' + inventory_hostname + '/' + domain + '/' + nextcloud_admin_user + ' length=80') }}"

reset_password_link: "disabled" # "" means internal enabled, "disabled" means disabled, <link> means using this link

import_config:
  system:
    # domain
    "overwrite.cli.url": "https://{{ effective_domain }}"
    trusted_domains:
      - "{{ effective_domain }}"
    # NextCloud
    lost_password_link: "{{ reset_password_link }}"
    # database
    dbtype: mysql
    dbhost: localhost
    dbport: ""
    dbuser: "{{ database_user }}"
    dbpassword: "{{ database_pass }}"
    dbname: "{{ database_name }}"
    # memcache
    memcache.local: '\OC\Memcache\APCu'
    memcache.distributed: '\OC\Memcache\Redis'
    memcache.locking: '\OC\Memcache\Redis'
    redis:
      host: "{{ redis_socket_path }}"
      port: 0

enabled_apps_list:
  - accessibility
  - activity
  - admin_audit
  - apporder
  - bruteforcesettings
  - calendar
  - checksum
  - cloud_federation_api
  - comments
  - contacts
  - cookbook
  - cospend
  - dav
  - deck
  - dicomviewer
  - external
  - federatedfilesharing
  - federation
  - files
  - files_automatedtagging
  - files_ebookreader
  - files_external
  - files_markdown
  - files_pdfviewer
  - files_rightclick
  - files_sharing
  - files_texteditor
  - files_trashbin
  - files_versions
  - files_videoplayer
  - firstrunwizard
  - gallery
  - logreader
  - lookup_server_connector
  - mail
  - metadata
  - nextcloud_announcements
  - notes
  - notifications
  - oauth2
  - ocdownloader
  - password_policy
  - phonetrack
  - polls
  - privacy
  - provisioning_api
  - quota_warning
  - ransomware_detection
  - ransomware_protection
  - serverinfo
  - sharebymail
  - sharerenamer
  - social
  - sociallogin
  - socialsharing_email
  - spreed
  - support
  - suspicious_login
  - systemtags
  - theming
  - twofactor_admin
  - twofactor_backupcodes
  - twofactor_gateway
  - twofactor_nextcloud_notification
  - twofactor_totp
  - twofactor_u2f
  - updatenotification
  - viewer
  - workflowengine

disabled_apps_list:
  - encryption
  - recommendations
  - survey_client
  - user_ldap