ansible-base/roles/tandoor/templates/conf.j2

{% if var_tandoor_database_kind == 'sqlite' %}
DB_ENGINE=django.db.backends.sqlite3
{% endif %}

{% if var_tandoor_database_kind == 'postgresql' %}
DB_ENGINE=django.db.backends.postgresql
POSTGRES_HOST={{var_tandoor_database_data_postgresql_host}}
POSTGRES_DB={{var_tandoor_database_data_postgresql_schema}}
POSTGRES_PORT={{var_tandoor_database_data_postgresql_port | string}}
POSTGRES_USER={{var_tandoor_database_data_postgresql_username}}
POSTGRES_PASSWORD={{var_tandoor_database_data_postgresql_password}}
{% endif %}

{% if var_tandoor_authentication_kind == 'internal' %}
ENABLE_SIGNUP=1
REMOTE_USER_AUTH=0
{% endif %}

{% if var_tandoor_authentication_kind == 'authelia' %}
ENABLE_SIGNUP=0
REMOTE_USER_AUTH=1
SOCIAL_PROVIDERS=allauth.socialaccount.providers.openid
# SOCIALACCOUNT_PROVIDERS={"openid_connect": {"OAUTH_PKCE_ENABLED": false, "APPS": [{"provider_id": "authelia", "name": "{{var_tandoor_authentication_data_authelia_label}}", "client_id": "{{var_tandoor_authentication_data_authelia_client_id}}", "secret": "{{var_tandoor_authentication_data_authelia_client_secret}}", "settings": {"server_url":"{{var_tandoor_authentication_data_authelia_url_base}}", "token_auth_method": "client_secret_basic", "oauth_pkce_enabled": false}}]}}
SOCIALACCOUNT_PROVIDERS={"openid_connect": {"APPS": [{"provider_id": "authelia", "name": "{{var_tandoor_authentication_data_authelia_label}}", "client_id": "{{var_tandoor_authentication_data_authelia_client_id}}", "secret": "{{var_tandoor_authentication_data_authelia_client_secret}}", "settings": {"server_url": "{{var_tandoor_authentication_data_authelia_url_base}}/.well-known/openid-configuration"}}]}}
{% endif %}

SECRET_KEY={{var_tandoor_secret_key}}

ALLOWED_HOSTS={{var_tandoor_domain}}

ENABLE_METRICS=0
ENABLE_PDF_EXPORT=0

DEBUG=0