multica deployment

ansible/roles/multica_docker/vars/main.yml

@@ -0,0 +1,32 @@
+---
+# Fixed by Multica's docker-compose.selfhost.yml (bound to 127.0.0.1)
+_multica_frontend_port: 3000
+_multica_backend_port: 8080
+_multica_compose_file: docker-compose.selfhost.yml
+
+_multica_app_host: "{{ multica_domain if multica_layout == 'single' else multica_app_domain }}"
+_multica_api_host: "{{ multica_domain if multica_layout == 'single' else multica_api_domain }}"
+_multica_port_suffix: "{{ '' if caddy_https_port | int == 443 else ':' ~ caddy_https_port }}"
+_multica_app_url: "https://{{ _multica_app_host }}{{ _multica_port_suffix }}"
+_multica_api_url: "https://{{ _multica_api_host }}{{ _multica_port_suffix }}"
+
+_multica_env_core:
+  JWT_SECRET: "{{ multica_jwt_secret }}"
+  POSTGRES_PASSWORD: "{{ multica_postgres_password }}"
+  MULTICA_VCS_SECRET_KEY: "{{ multica_vcs_secret_key }}"
+  MULTICA_IMAGE_TAG: "{{ multica_image_tag }}"
+  FRONTEND_ORIGIN: "{{ _multica_app_url }}"
+  MULTICA_APP_URL: "{{ _multica_app_url }}"
+
+# Split layout only: daemons/CLI talk to the API hostname
+_multica_env_split: "{{ {'MULTICA_PUBLIC_URL': _multica_api_url} if multica_layout == 'split' else {} }}"
+_multica_env_telemetry: "{{ {'DO_NOT_TRACK': 'true'} if multica_disable_telemetry | bool else {} }}"
+_multica_env_resend: "{{ {'RESEND_API_KEY': multica_resend_api_key} if (multica_resend_api_key | length) > 0 else {} }}"
+
+_multica_env: >-
+  {{ _multica_env_core
+     | combine(_multica_env_split, _multica_env_telemetry, _multica_env_resend, multica_extra_env) }}
+
+# Health URL used by post-deploy verification
+_multica_public_health_url: >-
+  {{ _multica_app_url ~ '/health' if multica_layout == 'single' else _multica_api_url ~ '/readyz' }}