# The name of the Nomad job.
job_name = "zitadel"

# The Nomad namespace to deploy into.
namespace = "default"

# The datacenters to deploy to.
datacenters = ["*"]

# The ZITADEL container image. Pin a tag in production.
image = "ghcr.io/zitadel/zitadel:latest"

# The PostgreSQL image for the bundled database.
postgres_image = "postgres:16-alpine"

# Host port for the ZITADEL console / API.
port = 8080

# Host port for the bundled PostgreSQL.
db_port = 5432

# Password for the bundled PostgreSQL. CHANGE THIS.
db_password = "zitadel_change_me"

# Exactly 32-character key used to encrypt secrets at rest. CHANGE THIS and keep it stable.
masterkey = "ChangeMeToARandom32CharMasterKey"

# Public domain/host ZITADEL is reached at (no scheme). Must match how users access it.
external_domain = "localhost"

# Set true when served over HTTPS (e.g. behind Traefik); false for plain HTTP.
external_secure = "false"

# First-instance admin username (login is <username>@zitadel.<external_domain>).
admin_username = "zitadel-admin"

# First-instance admin password. CHANGE THIS (needs upper/lower/number/symbol, 8+).
admin_password = "Password1!"

# Named volume for PostgreSQL data.
db_data_volume = "zitadel_db_data"

# Placement constraints. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []

# Resources for the ZITADEL app task.
resources = {
    cpu    = 1000
    memory = 1024
  }

# Resources for the bundled PostgreSQL task.
db_resources = {
    cpu    = 500
    memory = 512
  }