# GlobalArt on-premises installation. Copy to install.env, fill in, then run:
#   ./install.sh install.env
# Running it again upgrades the installation and keeps its data.

# The licence GlobalArt gave you. Online clusters use the key; a closed network
# installs without it, sends the installation id printed below to GlobalArt and
# sets LICENCE_FILE to the licence file it gets back.
LICENCE_KEY=GA-XXXXX-XXXXX-XXXXX-XXXXX
# LICENCE_FILE=./ownlate.lic

# The products to install. ownlate for now.
PRODUCTS=ownlate

# Pin a release instead of the newest, e.g. 0.2.1.
# CHART_VERSION=

# --- Letters -----------------------------------------------------------------
# Without SMTP_HOST the apps still show notifications in the bell but send no
# letters (no password invites, no resets).
SMTP_HOST=mail.example.com
SMTP_PORT=587
SMTP_FROM="OwnLate <ownlate@example.com>"
SMTP_USER=ownlate
SMTP_PASSWORD=
# SMTP_SECURE=true
COMPANY_NAME="Example LLC"
COMPANY_ADDRESS="1 Main Street, Example City"

# --- OwnLate -----------------------------------------------------------------
# Two hosts, one for the app and one for its API; they share a cookie, so they
# need a common parent domain.
OWNLATE_APP_HOST=ownlate.example.com
OWNLATE_API_HOST=api.ownlate.example.com
# OWNLATE_SCHEME=https
INGRESS_CLASS=nginx
# OWNLATE_TLS_SECRET=ownlate-tls

# The first administrator. Read their password from the notes the installer
# prints. Other people are added later on the admin screen.
OWNLATE_ADMIN_EMAIL=admin@example.com

# Sign-in through the company's identity provider, next to passwords. Register
# https://<OWNLATE_API_HOST>/public/v1/auth/callback with the provider.
# OWNLATE_OIDC_ISSUER=https://id.example.com/realms/main
# OWNLATE_OIDC_CLIENT_ID=ownlate
# OWNLATE_OIDC_CLIENT_SECRET=
# OWNLATE_OIDC_NAME="Example ID"
# OWNLATE_OIDC_AUTO_PROVISION=false

# Uploaded files sit on one shared volume by default, which pins a few services
# to one node. For several nodes point them at S3 instead.
# OWNLATE_S3_ENABLED=true
# OWNLATE_S3_ENDPOINT=https://s3.example.com
# OWNLATE_S3_BUCKET=ownlate
# OWNLATE_S3_ACCESS_KEY=
# OWNLATE_S3_SECRET_KEY=

# --- Registry (leave empty once the registry is public) ----------------------
# REGISTRY_USER=
# REGISTRY_PASSWORD=