---
# Fixed by Multica's docker-compose.selfhost.yml (bound to 127.0.0.1)
_multica_frontend_port: 3000
_multica_backend_port: 8080
_multica_compose_file: docker-compose.selfhost.yml

_multica_app_host: "{{ multica_domain if multica_layout == 'single' else multica_app_domain }}"
_multica_api_host: "{{ multica_domain if multica_layout == 'single' else multica_api_domain }}"
_multica_port_suffix: "{{ '' if caddy_https_port | int == 443 else ':' ~ caddy_https_port }}"
_multica_app_url: "https://{{ _multica_app_host }}{{ _multica_port_suffix }}"
_multica_api_url: "https://{{ _multica_api_host }}{{ _multica_port_suffix }}"

_multica_env_core:
  JWT_SECRET: "{{ multica_jwt_secret }}"
  POSTGRES_PASSWORD: "{{ multica_postgres_password }}"
  MULTICA_VCS_SECRET_KEY: "{{ multica_vcs_secret_key }}"
  MULTICA_IMAGE_TAG: "{{ multica_image_tag }}"
  FRONTEND_ORIGIN: "{{ _multica_app_url }}"
  MULTICA_APP_URL: "{{ _multica_app_url }}"

# Split layout only: daemons/CLI talk to the API hostname
_multica_env_split: "{{ {'MULTICA_PUBLIC_URL': _multica_api_url} if multica_layout == 'split' else {} }}"
_multica_env_telemetry: "{{ {'DO_NOT_TRACK': 'true'} if multica_disable_telemetry | bool else {} }}"
_multica_env_resend: "{{ {'RESEND_API_KEY': multica_resend_api_key} if (multica_resend_api_key | length) > 0 else {} }}"

_multica_env: >-
  {{ _multica_env_core
     | combine(_multica_env_split, _multica_env_telemetry, _multica_env_resend, multica_extra_env) }}

# Health URL used by post-deploy verification
_multica_public_health_url: >-
  {{ _multica_app_url ~ '/health' if multica_layout == 'single' else _multica_api_url ~ '/readyz' }}