main.yml

---
application_id: "web-app-taiga"
entity_name: "{{ application_id | entity_name }}"

TAIGA_EMAIL_BACKEND: "{{ 'smtp' if lookup('email', application_id).smtp else 'console' }}"

TAIGA_SUPERUSER_NAME: "{{ lookup('users', 'platform_administrator').username }}"
TAIGA_SUPERUSER_PASSWORD: "{{ lookup('users', 'platform_administrator').password }}"
TAIGA_SUPERUSER_EMAIL: "{{ lookup('users', 'platform_administrator').email }}"

TAIGA_COOKIE_SECURE: "{{ lookup('tls', lookup('domain', application_id), 'enabled') | bool | capitalize }}"
TAIGA_PLAINTEXT_COOKIE_FLAGS: |-
  proxy_cookie_flags sessionid nosecure;
  proxy_cookie_flags csrftoken nosecure;
TAIGA_LOCATION_CONFIGURATION: "{{ TAIGA_PLAINTEXT_COOKIE_FLAGS if TAIGA_COOKIE_SECURE | bool and not (lookup('tls', domain, 'enabled') | bool) else '' }}"

TAIGA_OIDC_ENABLED: "{{ lookup('config', application_id, 'services.sso.enabled') }}"
TAIGA_LDAP_ENABLED: "{{ lookup('config', application_id, 'services.ldap.enabled', false) }}"
TAIGA_OBJSTORE_ENABLED: "{{ lookup('objstore', application_id, 'enabled') }}"
TAIGA_PLUGINS_ENABLED: "{{ TAIGA_OIDC_ENABLED | bool or TAIGA_LDAP_ENABLED | bool or TAIGA_OBJSTORE_ENABLED | bool }}"
TAIGA_CONFIG_APPEND_MARKER: "INFINITO_TAIGA_AUTH_CONFIG"
TAIGA_OIDC_PLUGIN_REPOSITORY: "{{ lookup('config', application_id, 'services.sso.oidc.repository') }}"
TAIGA_OIDC_PLUGIN_REF: "{{ lookup('config', application_id, 'services.sso.oidc.ref') }}"
TAIGA_OIDC_FRONTEND_BUILDER_IMAGE: "{{ lookup('config', application_id, 'services.front.image') }}"
TAIGA_OIDC_FRONTEND_BUILDER_VERSION: "{{ lookup('config', application_id, 'services.front.version') }}"
TAIGA_OIDC_BACKEND_PIP_SPEC: "{{ 'git+' ~ TAIGA_OIDC_PLUGIN_REPOSITORY ~ '@' ~ TAIGA_OIDC_PLUGIN_REF ~ '#egg=taiga-contrib-oidc-auth&subdirectory=back' }}"
TAIGA_OIDC_FRONTEND_BUILD_COMMAND: "./node_modules/.bin/gulp build"
TAIGA_LDAP_PIP_SPEC: "taiga-contrib-ldap-auth-ext==0.5.0"
TAIGA_OBJSTORE_PIP_SPEC: "django-storages[s3]==1.14.4"
TAIGA_PLUGIN_PIP_INSTALL_ARGS: >-
  {{
    (
      (
        ['mozilla-django-oidc', "'" ~ TAIGA_OIDC_BACKEND_PIP_SPEC ~ "'"]
        if TAIGA_OIDC_ENABLED | bool
        else []
      )
      +
      (
        [TAIGA_LDAP_PIP_SPEC]
        if TAIGA_LDAP_ENABLED | bool
        else []
      )
      +
      (
        ["'" ~ TAIGA_OBJSTORE_PIP_SPEC ~ "'"]
        if TAIGA_OBJSTORE_ENABLED | bool
        else []
      )
    ) | join(' ')
  }}

TAIGA_REPOSITORY: "{{ lookup('config', 'web-app-taiga', 'services.taiga.repository') }}"
TAIGA_REF: "{{ lookup('config', 'web-app-taiga', 'services.taiga.ref') }}"
TAIGA_VERSION: "{{ lookup('config', application_id, 'services.taiga.version') }}"
TAIGA_CONFIG_DIRECTORY: "{{ lookup('container', application_id, 'directories.config') }}"
TAIGA_CONFIG_APPEND_PATH: "{{ [TAIGA_CONFIG_DIRECTORY, 'taiga-config.append.py'] | path_join }}"
TAIGA_URLS_PATH: "{{ [TAIGA_CONFIG_DIRECTORY, 'taiga-urls.py'] | path_join }}"
TAIGA_FRONTEND_CONF_PATH: "{{ [TAIGA_CONFIG_DIRECTORY, 'conf.json'] | path_join }}"
TAIGA_DESIGN_ENABLED: "{{ lookup('config', application_id, 'services.design.enabled') }}"
TAIGA_DESIGN_PLUGIN_MANIFEST_PATH: "{{ [TAIGA_CONFIG_DIRECTORY, 'infinito-design.json'] | path_join }}"
TAIGA_DESIGN_PLUGIN_CSS_PATH: "{{ [TAIGA_CONFIG_DIRECTORY, 'infinito-design.css'] | path_join }}"
TAIGA_DESIGN_PLUGIN_JS_PATH: "{{ [TAIGA_CONFIG_DIRECTORY, 'infinito-design.js'] | path_join }}"
TAIGA_SERVICE: "{{ entity_name }}"
TAIGA_HOSTNAME: "taiga-back"
TAIGA_CONTAINER: "{{ entity_name }}"

TAIGA_MANAGER_SERVICE: "manager"
TAIGA_MANAGER_CONTAINER: "{{ lookup('config', application_id, 'services.' ~ TAIGA_MANAGER_SERVICE ~ '.name') }}"
TAIGA_ASYNC_SERVICE: "async"
TAIGA_ASYNC_RABBITMQ_SERVICE: "async-rabbitmq"
TAIGA_EVENTS_RABBITMQ_SERVICE: "events-rabbitmq"
TAIGA_FRONT_SERVICE: "front"
TAIGA_EVENTS_SERVICE: "events"
TAIGA_PROTECTED_SERVICE: "protected"