main.yml

---
application_id: "web-app-snipe-it"
entity_name: "{{ application_id | entity_name }}"

swarm_stack_converge_retries: 600

database_password: "{{ lookup('config', application_id, 'secrets.credentials.database_password') }}" # nocheck: lookup-config-path

SNIPE_IT_URL: "{{ lookup('tls', application_id, 'url.base') }}"
SNIPE_IT_CONTAINER: "{{ lookup('config', application_id, 'services.snipe-it.name') }}"
SNIPE_IT_IMAGE: "{{ lookup('config', application_id, 'services.snipe-it.image') }}"
SNIPE_IT_VERSION: "{{ lookup('config', application_id, 'services.snipe-it.version') }}"
SNIPE_IT_SERVICE: "{{ entity_name }}"
SNIPE_IT_CONTAINER_ADDRESS: "{{ lookup('container_address', application_id, SNIPE_IT_SERVICE) }}"
SNIPE_IT_APP_KEY: "{{ lookup('config', application_id, 'secrets.credentials.app_key') }}"

SNIPE_IT_MAIL_FROM_NAME: "{{ lookup('config', application_id, 'services.email.from_name') }}"

SNIPE_IT_INITIAL_SETTINGS:
  alert_email: "{{ lookup('users', 'platform_administrator').email }}"
  alerts_enabled: 1
  auto_increment_assets: 0
  brand: 1
  default_currency: "USD"
  full_multiple_companies_support: 0
  locale: "{{ HOST_LL_CC }}"
  next_auto_tag_base: 1
  pwd_secure_min: 10
  site_name: "Snipe-IT"
  zerofill_count: 0

SNIPE_IT_LDAP_ENABLED: "{{ lookup('config', application_id, 'services.ldap.enabled') }}"
SNIPE_IT_TLS_ENABLED: "{{ lookup('tls', application_id, 'enabled') | bool }}"

SNIPE_IT_SSO_ENABLED: "{{ lookup('sso', application_id, 'is_proxy_gated') }}"
SNIPE_IT_SSO_HEADER_NAME: "INFINITO_SSO_USER"
SNIPE_IT_SSO_PROXY_HEADER: "X-Infinito-Sso-Proxy"
SNIPE_IT_SSO_PROXY_SECRET: "{{ lookup('config', application_id, 'secrets.credentials.sso_proxy_secret') }}"
SNIPE_IT_SSO_LOGOUT_URL: "{{ OIDC.CLIENT.LOGOUT_URL }}"

SNIPE_IT_DESIGN_ENABLED: "{{ lookup('config', application_id, 'services.design.enabled') | bool }}"
SNIPE_IT_DESIGN_DIR: "{{ [lookup('container', application_id, 'directories.config'), 'design'] | path_join }}"
SNIPE_IT_DESIGN_PALETTE: "{{ lookup('design_palette', lookup('config', 'web-svc-design', 'services.design.colors.base')) }}"
SNIPE_IT_DESIGN_BRANDING: "{{ lookup('design', application_id) }}"
SNIPE_IT_DESIGN_COLORS:
  header_color: "{{ SNIPE_IT_DESIGN_PALETTE.light['--design-frame'] }}"
  nav_link_color: "{{ SNIPE_IT_DESIGN_PALETTE.light['--design-on-frame'] }}"
  link_light_color: "{{ SNIPE_IT_DESIGN_PALETTE.light['--design-link'] }}"
  link_dark_color: "{{ SNIPE_IT_DESIGN_PALETTE.dark['--design-link'] }}"
  custom_css: "{{ lookup('file', 'custom_css.css', rstrip=False) }}"
SNIPE_IT_DESIGN_SETTINGS: >-
  {{
    SNIPE_IT_DESIGN_COLORS
    | combine({'site_name': SNIPE_IT_DESIGN_BRANDING.title} if SNIPE_IT_DESIGN_BRANDING.title is string else {})
    | combine({'brand': 2, 'assets': ['logo', 'favicon']} if SNIPE_IT_DESIGN_BRANDING.logo is string else {'assets': []})
  }}

SNIPE_IT_LDAP_FILTER_FRAGMENT: "&(objectClass=inetOrgPerson)"
SNIPE_IT_LDAP_AUTH_FILTER_QUERY: "{{ LDAP.USER.ATTRIBUTES.ID }}="
SNIPE_IT_LDAP_USER_FIRSTNAME: "{{ LDAP.USER.ATTRIBUTES.FIRSTNAME | lower }}"
SNIPEIT_MCP_ENABLED: "{{ lookup('config', application_id, 'services.snipeitmcp.enabled') | bool }}"
SNIPEIT_MCP_SERVICE_KEY: "snipeitmcp"
SNIPEIT_MCP_CONTAINER: "{{ lookup('config', application_id, 'services.snipeitmcp.name') }}"
SNIPEIT_MCP_PORT: "{{ lookup('config', application_id, 'services.snipeitmcp.ports.internal.http') }}"
SNIPEIT_MCP_BEARER: "{{ lookup('config', application_id, 'secrets.credentials.mcp_bearer') }}"
SNIPEIT_MCP_INSTANCE_DIR: "{{ [lookup('container', application_id, 'directories.instance'), 'mcp'] | path_join }}"
SNIPEIT_MCP_UPSTREAM_HOST: "{{ lookup('config', application_id, 'services.snipe-it.name') }}"
SNIPEIT_MCP_UPSTREAM_PORT: "{{ lookup('config', application_id, 'services.snipe-it.ports.internal.http') }}"
SNIPEIT_MCP_UPSTREAM_URL: "http://{{ SNIPEIT_MCP_UPSTREAM_HOST }}:{{ SNIPEIT_MCP_UPSTREAM_PORT }}"
SNIPEIT_MCP_CONTRACT:
  provider: "{{ application_id }}"
  upstream_url: "{{ SNIPEIT_MCP_UPSTREAM_URL }}"
  auth_subject: "{{ lookup('config', application_id, 'mcp.auth_subject') }}"
  mutating_tools_enabled: "{{ lookup('config', application_id, 'mcp.tools.mutating_tools_enabled') | bool }}"
  tools: "{{ lookup('file', 'mcp/tools.json') | from_json }}"
  limits: "{{ lookup('config', application_id, 'mcp.limits') }}"
  schema_sha256: "{{ lookup('config', application_id, 'mcp.tools.schema_sha256') }}"
SNIPEIT_MCP_ACCOUNT: "{{ lookup('users', 'mcp-web-app-snipe-it') }}"
SNIPEIT_MCP_UPSTREAM_PASSWORD: "{{ SNIPEIT_MCP_ACCOUNT.password }}"
SNIPEIT_MCP_UPSTREAM_USER: "{{ SNIPEIT_MCP_ACCOUNT.username }}"
SNIPEIT_MCP_UPSTREAM_TOKEN_NAME: "mcp-upstream"