# The name of the Nomad job.
job_name = "infisical"

# The Nomad namespace to deploy into.
namespace = "default"

# The datacenters to deploy to.
datacenters = ["*"]

# The Infisical container image. Pin a tag in production.
image = "infisical/infisical:latest"

# The PostgreSQL image for the bundled database.
postgres_image = "postgres:14-alpine"

# The Redis image for the bundled cache.
redis_image = "redis:7-alpine"

# Host port for the Infisical web UI / API.
port = 8080

# Host port for the bundled PostgreSQL.
db_port = 5432

# Host port for the bundled Redis.
redis_port = 6379

# Password for the bundled PostgreSQL. CHANGE THIS.
db_password = "infisical_change_me"

# 16-byte (32 hex chars) key for encrypting secrets at rest (openssl rand -hex 16). CHANGE THIS.
encryption_key = "00000000000000000000000000000000"

# Base64 32-byte secret for signing auth tokens (openssl rand -base64 32). CHANGE THIS.
auth_secret = "aGVsbG9fY2hhbmdlX21lX3RvX2FfcmFuZG9tX3ZhbHVlXzAwMDA="

# Public URL of this Infisical instance (used in links/emails).
site_url = "http://localhost:8080"

# Named volume for PostgreSQL data.
db_data_volume = "infisical_db_data"

# Named volume for Redis data.
redis_data_volume = "infisical_redis_data"

# Placement constraints. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []

# Resources for the Infisical app task.
resources = {
    cpu    = 1000
    memory = 1024
  }

# Resources for the bundled PostgreSQL task.
db_resources = {
    cpu    = 500
    memory = 512
  }

# Resources for the bundled Redis task.
redis_resources = {
    cpu    = 200
    memory = 128
  }