volumes.yml

---
php_hardening:
  type: config
  source: "{{ FILE_PHP_HARDENING_INI }}"
  mode: "0444"
  mounts:
    - service: fusiondirectory
      target: /etc/php7/conf.d/zz-infinito-hardening.ini
# nocheck: embedded-state-on-nfs generated asset cache; the authoritative state lives in LDAP
data:
  type: volume
  name: fusiondirectory_data
  backup: false
  mounts:
    - service: fusiondirectory
      target: /assets/fusiondirectory
design_css:
  type: config
  source: "{{ [lookup('container', 'web-app-fusiondirectory', 'directories.volumes'), 'theme.css'] | path_join }}"
  mode: "0444"
  mounts:
    - service: fusiondirectory
      target: /www/fusiondirectory/html/themes/breezy/theme.css
      when: "{{ lookup('config', 'web-app-fusiondirectory', 'services.design.enabled') | bool }}"
design_headers:
  type: config
  source: "{{ [lookup('container', 'web-app-fusiondirectory', 'directories.volumes'), 'headers.tpl'] | path_join }}"
  mode: "0444"
  mounts:
    - service: fusiondirectory
      target: /www/fusiondirectory/ihtml/themes/breezy/headers.tpl
      when: >-
        {{ (lookup('config', 'web-app-fusiondirectory', 'services.design.enabled') | bool)
           and (lookup('config', 'web-app-fusiondirectory', 'services.design.title', lookup('config', 'web-svc-design', 'services.design.title')) | string | lower)
           not in ['false', '0'] }}