variants.ymlยถ

---
# Matrix-deploy variant overrides for web-app-nextcloud.
# See docs/contributing/artefact/files/role/variants.md for the file format.
#
# nocheck: comments-valid: fifteen variants of ~90 near-identical service lines are
# unreadable without a heading naming what each one adds.
#
# nocheck: variant-limit: the loosely-coupled (bond<1) bridge partners are too heavy
# to co-host, so each budget-bin of them needs its own variant.
#
# nocheck: sso-variant-tor โ€” variant 8 pairs PeerTube, which is clearnet-only since
# 8ffb1f567, so that round cannot pin the onion on. Variant 14 carries the README
# replay alone and keeps it on clearnet, where it ran beside PeerTube before.
#
# enabled and shared stay coupled (both true or both false). v0 enables every
# tightly-coupled (bond>=1, same-host) service - the host baseline test_order pins.
# Each later variant adds one budget-bin of loosely-coupled (bond<1, separate-host)
# partners; those are excluded from the closure (bond-aware test_order) so they need
# not appear in v0 and can be distributed to keep every host under budget.

# Variant 0: baseline - all tightly-coupled (bond>=1) services
- services:
    docs:
      enabled: false
      shared: false
    container_backup:
      enabled: true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: true
      shared: true
    logout:
      enabled: true
      shared: true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: true
      shared: true
    context_agent:
      enabled: true
      shared: true
    matomo:
      enabled: true
      shared: true
    email:
      enabled: true
      shared: true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: true
      shared: true
      ports:
        public:
          relay:
            start: 61000
            end: 61063
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: true
      shared: true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: true
      shared: true
    design:
      enabled: true
      shared: true
    prometheus:
      enabled: true
      shared: true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
# Variant 1: minimal - SSO off, no partners
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    context_agent:
      enabled: true
      shared: true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: false # nocheck: variants-static-override backup shared stays literally true
    redis:
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: true
      shared: true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: true
      shared: true
    openclaw:
      enabled: true
      shared: true
  addons: &addons_static_off
    appointments:
      enabled: false
    calendar:
      enabled: false
    collectives:
      enabled: false
    contacts:
      enabled: false
    cospend:
      enabled: false
    drawio:
      enabled: false
    epubviewer:
      enabled: false
    event_update_notification:
      enabled: false
    external:
      enabled: false
    files_bpm:
      enabled: false
    forms:
      enabled: false
    gpxpod:
      enabled: false
    groupfolders:
      enabled: false
    mail:
      enabled: false
    metadata:
      enabled: false
    news:
      enabled: false
    phonetrack:
      enabled: false
    polls:
      enabled: false
    quota_warning:
      enabled: false
    recognize:
      enabled: false
    tables:
      enabled: false
    tasks:
      enabled: false
# Variant 2: openwebui
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: true
      shared: true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 3: openproject
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: true
      shared: true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 4: onlyoffice + mastodon
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: true
      shared: true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: true
      shared: true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 5: zammad
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: true
      shared: true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 6: gitlab
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: true
      shared: true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 7: discourse
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: true
      shared: true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 8: peertube - clearnet, because the OIDC plugin rejects a plaintext onion issuer
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: true
      shared: true
    tor:
      enabled: false
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 9: xwiki
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: true
      shared: true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 10: mattermost
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: true
      shared: true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 11: bigbluebutton - clearnet, because bigbluebutton rides no node onion
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: false
      shared: false
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: true
      shared: true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: false
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 12: matrix
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: true
      shared: true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 13: litellm
- services:
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: true
      shared: true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: true
      shared: true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: true
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    tor:
      enabled: true
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off
# Variant 14: docs - the README replay alone, because together with a partner it outruns the job budget
- services:
    docs:
      enabled: true
      shared: true
    container_backup:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    sso:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    coturn:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    logout:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    ldap:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    dashboard:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matomo:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    email:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mariadb:
      shared: true
    redis:
      shared: true
    talk:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    talk_recording:
      enabled: false
    onlyoffice:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    collabora:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    bigbluebutton:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    xwiki:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    seaweedfs:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    design:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    prometheus:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openproject:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    gitlab:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    discourse:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    mattermost:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    matrix:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    zammad:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    openwebui:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    litellm:
      enabled: false
    mastodon:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    peertube:
      enabled: false
      shared: false # nocheck: variants-static-override backup shared stays literally true
    # nocheck: variant-tor-collateral docs rides the smallest round of each role because the README replay is the costliest partner in the matrix; the guide serves over the onion in both web-app-docs variants, which is where that is proven
    tor: # nocheck: variant-tor-off the README replay installs the role onto the clearnet DOMAIN_PRIMARY through the clearnet resolver (web-app-docs templates/test.env.j2), so this round has no onion surface to prove
      enabled: false
    hermes:
      enabled: false
      shared: false
    openclaw:
      enabled: false
      shared: false
  addons: *addons_static_off