---
# nocheck: seaweedfs-required — object storage not implemented for this role
# nocheck: dynamic-flag
# nocheck: sso
sso:
enabled: false
shared: false
# nocheck: dynamic-flag
logout:
bond: 1
enabled: "{{ 'web-svc-logout' in group_names }}"
shared: "{{ 'web-svc-logout' in group_names }}"
dashboard:
bond: 1
enabled: "{{ 'web-app-dashboard' in group_names }}"
shared: "{{ 'web-app-dashboard' in group_names }}"
# nocheck: playwright-service-flag — self-provider
matomo:
healthcheck:
test:
- "CMD-SHELL"
- "code=\"$$(curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1/index.php || echo 000)\"; [ \"$$code\" -ge 200 ] && [ \"$$code\" -lt 400 ]"
retries: 12
# nocheck: healthcheck-timing-override boots slower than the ten minute window; the value predates this default and has not been measured against it
start_period: 900s
modes:
compose:
enabled: true
swarm:
enabled: true
bond: 1
enabled: true # nocheck: dynamic-flag
shared: true
image: matomo
version: "5.14.2"
custom: true
name: matomo
min_storage: 404MB
backup:
no_stop_required: true
cpus: 1.0
mem_reservation: 512m
mem_limit: 1g
pids_limit: 512
site_name: Matomo on {{ DOMAIN_PRIMARY }}
tracking:
scope: sub
token:
description: Created by {{ SOFTWARE_NAME }}
excluded_ips: "{{ networks.internet.values() | list }}"
ports:
local:
http: 8018
internal:
http: 80
proxy:
service_key: matomo
lifecycle: beta
bootstrap:
replicas: 0
image: ghcr.io/kevinveenbirkenbach/matomo-bootstrap
version: 1.1.13
name: matomo-bootstrap
profiles:
- bootstrap
timeout: 30
cpus: 1.0
mem_reservation: 256m
mem_limit: 1g
pids_limit: 512
min_storage: 1037MB
# nocheck: playwright-service-flag — DB engine, covered by role-local integration tests
mariadb:
bond: 1
enabled: true # nocheck: dynamic-flag
shared: "{{ 'svc-db-mariadb' in group_names }}"
# nocheck: dynamic-flag
# nocheck: playwright-service-flag — DB engine, covered by role-local integration tests
redis:
backup:
disabled: true
enabled: false
shared: "{{ 'svc-db-redis' in group_names }}"
# nocheck: playwright-service-flag — verified by web-svc-css provider spec
css:
bond: 1
enabled: "{{ 'web-svc-css' in group_names }}"
shared: "{{ 'web-svc-css' in group_names }}"
prometheus:
bond: 1
enabled: "{{ 'web-app-prometheus' in group_names }}"
shared: "{{ 'web-app-prometheus' in group_names }}"
# nocheck: playwright-service-flag
# nocheck: variants-coverage — sso-variant-tor requires the onion on in every variant, so the false polarity has no variant left to live in
tor:
bond: 0.5
enabled: "{{ 'svc-net-tor' in group_names }}"
shared: true # nocheck: dynamic-flag
# nocheck: dynamic-flag
# nocheck: playwright-service-flag, dynamic-flag infrastructure backup consumer
container_backup: # nocheck: bond-baseline backup host joins outside the variant topology
bond: 1
enabled: "{{ 'svc-bkp-volume-2-local' in group_names }}"
shared: true
