---
freshrss_version: latest
freshrss_service_directory: /var/lib/docker/services/freshrss

freshrss_container_name: freshrss
freshrss_image: "xoxys/freshrss:{{ freshrss_version }}"
freshrss_restart_policy: on-failure
freshrss_exposed_port: 61000
freshrss_exposed_ip: 127.0.0.1
freshrss_extra_hosts: []

# @var freshrss_memory_limit: $ "_unset_"
# @var freshrss_memory_limit:example: $ "512m"
# @var freshrss_memory_reservation: $ "_unset_"
# @var freshrss_memory_reservation:example: $ "256m"
# @var freshrss_cpu_shares: $ "_unset_"
# @var freshrss_cpu_shares:example: $ "1024"

freshrss_cap_add: []
freshrss_cap_drop: []
freshrss_security_opt: []
# @var freshrss_pids_limit: $ "_unset_"

freshrss_healthcheck:
  test: '["CMD", "/usr/local/bin/healthcheck.sh"]'
  interval: 30s
  timeout: 5s
  retries: 5

freshrss_default_user: "admin"
freshrss_default_password: "freshrss"

# @var freshrss_salt:description: >
# Salt is used to make crypto more unique. You can generate your own salt with 
# e.g. `cat /proc/sys/kernel/random/uuid | sha1sum | awk '{print $1}'`.
# @end
# @var freshrss_salt: $ "_unset_"

# @var freshrss_base_url:description: >
# Specify address of the freshrss instance, used when building 
# absolute urls, e.g. for websub.
# @end
freshrss_base_url: "http://localhost/"
freshrss_language: "en"
freshrss_title: "FreshRSS"
# @var freshrss_meta_description: $ "_unset_"
freshrss_allow_anonymous: "false"
freshrss_allow_anonymous_refresh: "false"
freshrss_auth_type: "form"
freshrss_api_enabled: "false"
freshrss_unsafe_autologin_enabled: "false"
freshrss_simplepie_syslog_enabled: "true"
freshrss_pubsubhubbub_enabled: "false"
freshrss_allow_robots: "false"
freshrss_allow_referrer: "false"
freshrss_limits_cookie_duration: "2592000"
freshrss_limits_cache_duration: "800"
freshrss_limits_timeout: "15"
freshrss_limits_max_inactivity: "10800"
freshrss_limits_max_feeds: "16384"
freshrss_limits_max_categories: "16384"
freshrss_limits_max_registrations: "1"
# @var freshrss_curlopt_ssl_verifyhost: $ "_unset_"
# @var freshrss_curlopt_ssl_verifypeer: $ "_unset_"
# @var freshrss_curlopt_proxytype: $ "_unset_"
# @var freshrss_curlopt_proxy: $ "_unset_"
# @var freshrss_curlopt_proxyport: $ "_unset_"
# @var freshrss_curlopt_proxyauth: $ "_unset_"
# @var freshrss_curlopt_proxyuserpwd: $ "_unset_"

# @var freshrss_extensions_enabled:description: >
# List of FreshRSS extensions to enable. Extensions must be already installed!
# @end
freshrss_extensions_enabled:
  - "Tumblr-GDPR"

freshrss_postgres_ssl_mode: disable
freshrss_postgres_ssl_rootcert: /etc/ssl/certs/ca-certificates.crt
freshrss_postgres_server: "{{ inventory_hostname }}"
freshrss_postgres_port: 5432
freshrss_postgres_superuser: postgres
freshrss_postgres_password: postgres

freshrss_postgres_db:
  name: freshrss
  lc_collate: en_US.UTF-8
  lc_ctype: en_US.UTF-8'
  encoding: UTF-8
  template: template0
  login_user: "{{ freshrss_postgres_superuser }}"
  login_password: "{{ freshrss_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ freshrss_postgres_port }}"
  # owner: # defaults to not set
  state: present

freshrss_postgres_user:
  name: pgfreshrss
  password: freshrss
  encrypted: 'yes'
  # priv: # defaults to not set
  # role_attr_flags: # defaults to not set
  db: "{{ freshrss_postgres_db.name }}"
  login_user: "{{ freshrss_postgres_superuser }}"
  login_password: "{{ freshrss_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ freshrss_postgres_port }}"
  state: present

freshrss_iptables_enabled: False
freshrss_open_ports:
  - name: allow_freshrss_web
    rules: |
      -A INPUT -m state --state NEW -p tcp --dport {{ freshrss_exposed_port }} -j ACCEPT
    state: present