---
# Template de la configuration Arkindex. Rendu par scripts/01-render-config.sh (envsubst).
# Variables attendues : DOMAIN, SECRET_KEY, PG_PASS, GK_ID, GK_SECRET.
# IMPORTANT : les services internes sont référencés par leur NOM DE CONTENEUR UNIQUE
# (ark-database, ark-redis, ark-solr) et jamais par db/redis/solr — sinon collision DNS
# avec coolify-redis/coolify-db sur le réseau partagé "coolify".

arkindex_env: production
public_hostname: https://${DOMAIN}
local_imageserver_id: 12345
secret_key: "${SECRET_KEY}"

cache:
  type: redis
  url: redis://ark-redis:6379/1

database:
  host: ark-database
  port: 5432
  name: arkindex
  user: arkindex
  password: "${PG_PASS}"

redis:
  host: ark-redis
  port: 6379

s3:
  access_key_id: "${GK_ID}"
  secret_access_key: "${GK_SECRET}"
  endpoint: https://s3.${DOMAIN}
  region: local

allowed_hosts:
  - ${DOMAIN}

session:
  cookie_domain: ${DOMAIN}
  cookie_secure: true

csrf:
  cookie_domain: ${DOMAIN}
  cookie_secure: true
  trusted_origins:
    - 'https://${DOMAIN}'

cors:
  origin_whitelist:
    - https://${DOMAIN}

features:
  signup: no
  search: yes

solr:
  api_url: http://ark-solr:8983/solr/

static:
  cdn_assets_url: https://assets.teklia.com/arkindex
  frontend_version: 1.12.2

ponos:
  default_env:
    ARKINDEX_API_URL: https://${DOMAIN}/api/v1/

ingest:
  access_key_id: "${GK_ID}"
  secret_access_key: "${GK_SECRET}"
  endpoint: https://s3.${DOMAIN}
  region: local
  imageserver_id: 67890
  extra_buckets:
    - ingest
  prefix_by_bucket_name: false