# Legacy Avatar deployment environment — pre-authentik.
#
# Modeled on a real pre-authentik legacy deployment layout (flat .env +
# .secrets/, no NGINX_TLS_ENABLED / authentik / telemetry keys — those are
# newer concepts the deploy tool's `migrate` command must prompt for). This
# fixture intentionally omits them so the e2e test exercises the *real*
# interactive prompts an operator migrating such a deployment would see,
# rather than papering over them with pre-seeded config.
#
# AVATAR_DOMAIN/SMTP_HOST are set to CI-safe values (not a real customer
# domain/mailserver) since this fixture is exercised by automated tests.
# AVATAR_DOMAIN=octopize.local: an ordinary hostname the e2e test expects to
# resolve to 127.0.0.1 via /etc/hosts (the test asserts this up front and
# tells you exactly what line to add if it's missing — see the e2e test).
# We deliberately depend on /etc/hosts rather than a public wildcard-DNS
# domain (lvh.me / nip.io / localtest.me) so the test never relies on a
# third-party service being up. Deliberately NOT "localhost": the compose
# template gives the nginx container a network alias for AVATAR_DOMAIN so
# *other* containers can reach it through the Docker-internal DNS — but
# "localhost" is special-cased by glibc/musl resolvers (via /etc/hosts)
# ahead of that alias, so containers other than nginx itself would fail to
# resolve it and every container-to-container call to the public URL (e.g.
# the API fetching Authentik's OIDC metadata) would connect to themselves
# instead. octopize.local is an ordinary hostname, so the alias trick works
# as designed.

ENV_NAME=e2e-test
ORGANIZATION_NAME=octopize

# Paths & Storage
HOST_SHARED_STORAGE_PATH=/tmp/avatar/shared
SECRETS_DIR=.secrets
DB_VOLUME=avatar_postgres_data
SEAWEEDFS_VOLUME=avatar_seaweedfs_data
SEAWEEDFS_METADATA_VOLUME=avatar_seaweedfs_metadata
SEAWEEDFS_BLOCKS_VOLUME=avatar_seaweedfs_blocks
DB_SERVICE=db
DB_ADMIN_USER=avatar_dba
ACCESS_CONTROL_ENDPOINT_PORT=8111

# Service versions (release-managed by the deploy tool; ignored on migrate,
# carried here only to match the real legacy layout)
AVATAR_API_VERSION=2.55.0
AVATAR_PDFGENERATOR_VERSION=0.2.0
AVATAR_WEB_VERSION=0.38.0
AVATAR_SEAWEEDFS_REGISTRY=chrislusf
AVATAR_SEAWEEDFS_VERSION=4.17
AVATAR_SEAWEEDFS_LOG_VERBOSITY=0

# Domain / URLs  (old-style: AVATAR_DOMAIN is the legacy key for PUBLIC_URL)
AVATAR_DOMAIN=octopize.local
AVATAR_API_URL=https://octopize.local/api
AVATAR_WEB_CLIENT_URL=https://octopize.local/web
AVATAR_STORAGE_ENDPOINT_PUBLIC_URL=https://octopize.local/storage
AVATAR_STORAGE_ENDPOINT_INTERNAL_URL=http://s3:8333
AVATAR_PDFGENERATOR_URL=http://pdfgenerator:8000

# Email — configured directly in the API pre-authentik.
# Points at the MailHog sink the e2e test attaches to the compose network,
# so no real outbound mail is ever sent (see services-client-integration-docker.yml).
SHOULD_SEND_MAIL=true
USE_EMAIL_AUTHENTICATION=true
MAIL_PROVIDER=smtp
SMTP_HOST=mailhog.local
SMTP_PORT=1025
SMTP_USE_TLS=false
SMTP_START_TLS=false
SMTP_VERIFY=false
SMTP_SENDER_EMAIL=noreply@ci.test

# Logging & debug
USE_CONSOLE_LOGGING=true
IS_SENTRY_ENABLED=false
LOG_LEVEL=INFO

# Limits
MAX_ALLOWED_DIMENSIONS_PER_DATASET=5000
MAX_ALLOWED_LINES_PER_DATASET=10000000

# Storage
DATASET_EXPIRATION_DAYS=30d
SHARED_STORAGE_PATH=s3://{user_id}/{expire_days}d
