configmap-env.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: {{ include "mastodon.fullname" . }}-env
  labels:
    {{- include "mastodon.labels" . | nindent 4 }}
data:
  RAILS_LOG_LEVEL: {{ .Values.mastodon.logLevel.rails | default "info" }}
  LOG_LEVEL: {{ .Values.mastodon.logLevel.streaming | default "info" }}
  DB_HOST: {{ template "mastodon.postgres.host" . }}
  DB_PORT: {{ template "mastodon.postgres.port" . }}
  DB_NAME: {{ .Values.postgresql.auth.database }}
  DB_USER: {{ .Values.postgresql.auth.username }}
  {{- if .Values.postgresql.readReplica.hostname }}
  REPLICA_DB_HOST: {{ .Values.postgresql.readReplica.hostname }}
  {{- end }}
  {{- if .Values.postgresql.readReplica.port }}
  REPLICA_DB_PORT: {{ .Values.postgresql.readReplica.port | quote }}
  {{- end }}
  {{- if .Values.postgresql.readReplica.auth.database }}
  REPLICA_DB_NAME: {{ .Values.postgresql.readReplica.auth.database }}
  {{- end }}
  {{- if .Values.postgresql.readReplica.auth.username }}
  REPLICA_DB_USER: {{ .Values.postgresql.readReplica.auth.username }}
  {{- end }}
  {{- if .Values.postgresql.readReplica.auth.password }}
  REPLICA_DB_PASS: {{ .Values.postgresql.readReplica.auth.password }}
  {{- end }}
  PREPARED_STATEMENTS: {{ .Values.mastodon.preparedStatements | quote }}
  {{- if .Values.mastodon.locale }}
  DEFAULT_LOCALE: {{ .Values.mastodon.locale }}
  {{- end }}
  {{- if .Values.elasticsearch.enabled }}
  ES_ENABLED: "true"
  ES_PRESET: {{ .Values.elasticsearch.preset | default "single_node_cluster" | quote }}
  ES_HOST: {{ template "mastodon.elasticsearch.fullname" . }}-master-hl
  ES_PORT: "9200"
  {{- else if .Values.elasticsearch.hostname }}
  ES_ENABLED: "true"
  ES_PRESET: {{ .Values.elasticsearch.preset | default "single_node_cluster" | quote }}
  ES_HOST: {{ include "mastodon.elasticsearch.fullHostname" .}}
  ES_PORT: {{ .Values.elasticsearch.port | default "9200" | quote }}
  {{- if .Values.elasticsearch.caSecret }}
  ES_CA_FILE: /opt/opensearch/config/ca.certs
  {{- end }}
  {{- end }}
  {{- with .Values.elasticsearch.user }}
  ES_USER: {{ . }}
  {{- end }}
  {{- if .Values.elasticsearch.indexPrefix }}
  ES_PREFIX: {{ .Values.elasticsearch.indexPrefix | quote }}
  {{- end }}
  LOCAL_DOMAIN: {{ .Values.mastodon.local_domain }}
  {{- with .Values.mastodon.web_domain }}
  WEB_DOMAIN: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.alternate_domains }}
  ALTERNATE_DOMAINS: {{ join "," . }}
  {{- end }}
  {{- with .Values.mastodon.singleUserMode }}
  SINGLE_USER_MODE: "true"
  {{- end }}
  {{- with .Values.mastodon.authorizedFetch }}
  AUTHORIZED_FETCH: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.limitedFederationMode }}
  LIMITED_FEDERATION_MODE: {{ . | quote }}
  {{- end }}
  # https://devcenter.heroku.com/articles/tuning-glibc-memory-behavior
  MALLOC_ARENA_MAX: "2"
  NODE_ENV: "production"
  RAILS_ENV: "production"
  REDIS_HOST: {{ template "mastodon.redis.host" . }}
  REDIS_PORT: {{ .Values.redis.port | default "6379" | quote }}
  {{- if .Values.redis.sidekiq.enabled }}
  {{- if .Values.redis.sidekiq.hostname }}
  SIDEKIQ_REDIS_HOST: {{ .Values.redis.sidekiq.hostname }}
  {{- else }}
  SIDEKIQ_REDIS_HOST: {{ .Values.redis.hostname }}
  {{- end }}
  {{- if .Values.redis.sidekiq.port }}
  SIDEKIQ_REDIS_PORT: {{ .Values.redis.sidekiq.port | quote }}
  {{- else }}
  SIDEKIQ_REDIS_PORT: {{ .Values.redis.port | default "6379" | quote }}
  {{- end }}
  {{- end }}
  {{- if .Values.redis.cache.enabled }}
  {{- if .Values.redis.cache.hostname }}
  CACHE_REDIS_HOST: {{ .Values.redis.cache.hostname }}
  {{- else }}
  CACHE_REDIS_HOST: {{ .Values.redis.hostname}}
  {{- end }}
  {{- if .Values.redis.cache.port }}
  CACHE_REDIS_PORT: {{ .Values.redis.cache.port | quote }}
  {{- else }}
  CACHE_REDIS_PORT: {{ .Values.redis.port | default "6379" | quote }}
  {{- end }}
  {{- end }}
  {{- if .Values.mastodon.s3.enabled }}
  S3_BUCKET: {{ .Values.mastodon.s3.bucket }}
  S3_ENABLED: "true"
  S3_ENDPOINT: {{ .Values.mastodon.s3.endpoint }}
  S3_HOSTNAME: {{ .Values.mastodon.s3.hostname }}
  S3_PROTOCOL: {{ .Values.mastodon.s3.protocol }}
  {{- if .Values.mastodon.s3.permission }}
  S3_PERMISSION: {{ .Values.mastodon.s3.permission }}
  {{- end }}
  {{- with .Values.mastodon.s3.region }}
  S3_REGION: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.s3.alias_host }}
  S3_ALIAS_HOST: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.s3.multipart_threshold }}
  S3_MULTIPART_THRESHOLD: "{{ . }}"
  {{- end }}
  {{- with .Values.mastodon.s3.override_path_style }}
  S3_OVERRIDE_PATH_STYLE: "{{ . }}"
  {{- end }}
  {{- end }}
  {{- with .Values.mastodon.smtp.auth_method }}
  SMTP_AUTH_METHOD: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.ca_file }}
  SMTP_CA_FILE: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.delivery_method }}
  SMTP_DELIVERY_METHOD: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.domain }}
  SMTP_DOMAIN: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.enable_starttls }}
  SMTP_ENABLE_STARTTLS: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.enable_starttls_auto }}
  SMTP_ENABLE_STARTTLS_AUTO: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.from_address }}
  SMTP_FROM_ADDRESS: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.return_path }}
  SMTP_RETURN_PATH: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.openssl_verify_mode }}
  SMTP_OPENSSL_VERIFY_MODE: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.port }}
  SMTP_PORT: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.reply_to }}
  SMTP_REPLY_TO: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.server }}
  SMTP_SERVER: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.tls }}
  SMTP_TLS: {{ . | quote }}
  {{- end }}
  {{- if .Values.mastodon.smtp.bulk.enabled }}
  {{- with .Values.mastodon.smtp.bulk.auth_method }}
  BULK_SMTP_AUTH_METHOD: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.ca_file }}
  BULK_SMTP_CA_FILE: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.domain }}
  BULK_SMTP_DOMAIN: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.enable_starttls }}
  BULK_SMTP_ENABLE_STARTTLS: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.enable_starttls_auto }}
  BULK_SMTP_ENABLE_STARTTLS_AUTO: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.from_address }}
  BULK_SMTP_FROM_ADDRESS: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.openssl_verify_mode }}
  BULK_SMTP_OPENSSL_VERIFY_MODE: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.port }}
  BULK_SMTP_PORT: {{ . | quote }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.server }}
  BULK_SMTP_SERVER: {{ . }}
  {{- end }}
  {{- with .Values.mastodon.smtp.bulk.tls }}
  BULK_SMTP_TLS: {{ . | quote }}
  {{- end }}
  {{- end }}
  STREAMING_CLUSTER_NUM: {{ .Values.mastodon.streaming.workers | quote }}
  {{- with .Values.mastodon.streaming.base_url }}
  STREAMING_API_BASE_URL: {{ . | quote }}
  {{- end }}
  {{- if .Values.mastodon.trusted_proxy_ip }}
  TRUSTED_PROXY_IP: {{ .Values.mastodon.trusted_proxy_ip }}
  {{ end }}
  {{- if .Values.externalAuth.oidc.enabled }}
  OIDC_ENABLED: {{ .Values.externalAuth.oidc.enabled | quote }}
  OIDC_DISPLAY_NAME: {{ .Values.externalAuth.oidc.display_name }}
  OIDC_ISSUER: {{ .Values.externalAuth.oidc.issuer }}
  OIDC_DISCOVERY: {{ .Values.externalAuth.oidc.discovery | quote }}
  OIDC_SCOPE: {{ .Values.externalAuth.oidc.scope | quote }}
  OIDC_UID_FIELD: {{ .Values.externalAuth.oidc.uid_field }}
  OIDC_CLIENT_ID: {{ .Values.externalAuth.oidc.client_id | quote }}
  OIDC_REDIRECT_URI: {{ .Values.externalAuth.oidc.redirect_uri }}
  OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ .Values.externalAuth.oidc.assume_email_is_verified | quote }}
  {{- if and .Values.externalAuth.oidc.client_secret (not .Values.externalAuth.oidc.existingSecret) }}
  OIDC_CLIENT_SECRET: {{ .Values.externalAuth.oidc.client_secret | quote }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.client_auth_method }}
  OIDC_CLIENT_AUTH_METHOD: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.response_type }}
  OIDC_RESPONSE_TYPE: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.response_mode }}
  OIDC_RESPONSE_MODE: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.display }}
  OIDC_DISPLAY: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.prompt }}
  OIDC_PROMPT: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.send_nonce }}
  OIDC_SEND_NONCE: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.send_scope_to_token_endpoint }}
  OIDC_SEND_SCOPE_TO_TOKEN_ENDPOINT: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.idp_logout_redirect_uri }}
  OIDC_IDP_LOGOUT_REDIRECT_URI: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.http_scheme }}
  OIDC_HTTP_SCHEME: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.host }}
  OIDC_HOST: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.port }}
  OIDC_PORT: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.jwks_uri }}
  OIDC_JWKS_URI: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.auth_endpoint }}
  OIDC_AUTH_ENDPOINT: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.token_endpoint }}
  OIDC_TOKEN_ENDPOINT: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.user_info_endpoint }}
  OIDC_USER_INFO_ENDPOINT: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.oidc.end_session_endpoint }}
  OIDC_END_SESSION_ENDPOINT: {{ . }}
  {{- end }}
  {{- end }}
  {{- if .Values.externalAuth.saml.enabled }}
  SAML_ENABLED: {{ .Values.externalAuth.saml.enabled | quote }}
  SAML_ACS_URL: {{ .Values.externalAuth.saml.acs_url }}
  SAML_ISSUER: {{ .Values.externalAuth.saml.issuer }}
  SAML_IDP_SSO_TARGET_URL: {{ .Values.externalAuth.saml.idp_sso_target_url }}
  SAML_IDP_CERT: {{ .Values.externalAuth.saml.idp_cert | quote }}
  {{- with .Values.externalAuth.saml.idp_cert_fingerprint }}
  SAML_IDP_CERT_FINGERPRINT: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.name_identifier_format }}
  SAML_NAME_IDENTIFIER_FORMAT: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.saml.cert }}
  SAML_CERT: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.private_key }}
  SAML_PRIVATE_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.want_assertion_signed }}
  SAML_SECURITY_WANT_ASSERTION_SIGNED: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.want_assertion_encrypted }}
  SAML_SECURITY_WANT_ASSERTION_ENCRYPTED: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.assume_email_is_verified }}
  SAML_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.uid_attribute }}
  SAML_UID_ATTRIBUTE: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.saml.attributes_statements.uid }}
  SAML_ATTRIBUTES_STATEMENTS_UID: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.attributes_statements.email }}
  SAML_ATTRIBUTES_STATEMENTS_EMAIL: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.attributes_statements.full_name }}
  SAML_ATTRIBUTES_STATEMENTS_FULL_NAME: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.attributes_statements.first_name }}
  SAML_ATTRIBUTES_STATEMENTS_FIRST_NAME: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.attributes_statements.last_name }}
  SAML_ATTRIBUTES_STATEMENTS_LAST_NAME: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.attributes_statements.verified }}
  SAML_ATTRIBUTES_STATEMENTS_VERIFIED: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.saml.attributes_statements.verified_email }}
  SAML_ATTRIBUTES_STATEMENTS_VERIFIED_EMAIL: {{ . | quote }}
  {{- end }}
  {{- end }}
  {{- with .Values.externalAuth.oauth_global.omniauth_only }}
  OMNIAUTH_ONLY: {{ . | quote }}
  {{- end }}
  {{- if .Values.externalAuth.cas.enabled }}
  CAS_ENABLED: {{ .Values.externalAuth.cas.enabled | quote }}
  CAS_URL: {{ .Values.externalAuth.cas.url }}
  CAS_HOST: {{ .Values.externalAuth.cas.host }}
  CAS_PORT: {{ .Values.externalAuth.cas.port }}
  CAS_SSL: {{ .Values.externalAuth.cas.ssl | quote }}
  {{- with .Values.externalAuth.cas.validate_url }}
  CAS_VALIDATE_URL: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.cas.callback_url }}
  CAS_CALLBACK_URL: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.cas.logout_url }}
  CAS_LOGOUT_URL: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.cas.login_url }}
  CAS_LOGIN_URL: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.cas.uid_field }}
  CAS_UID_FIELD: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.ca_path }}
  CAS_CA_PATH: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.cas.disable_ssl_verification }}
  CAS_DISABLE_SSL_VERIFICATION: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.assume_email_is_verified }}
  CAS_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.uid }}
  CAS_UID_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.name }}
  CAS_NAME_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.email }}
  CAS_EMAIL_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.nickname }}
  CAS_NICKNAME_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.first_name }}
  CAS_FIRST_NAME_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.last_name }}
  CAS_LAST_NAME_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.location }}
  CAS_LOCATION_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.image }}
  CAS_IMAGE_KEY: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.cas.keys.phone }}
  CAS_PHONE_KEY: {{ . | quote }}
  {{- end }}
  {{- end }}
  {{- with .Values.externalAuth.pam.enabled }}
  PAM_ENABLED: {{ . | quote }}
  {{- with .Values.externalAuth.pam.email_domain }}
  PAM_EMAIL_DOMAIN: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.pam.default_service }}
  PAM_DEFAULT_SERVICE: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.pam.controlled_service }}
  PAM_CONTROLLED_SERVICE: {{ . }}
  {{- end }}
  {{- end }}
  {{- if .Values.externalAuth.ldap.enabled }}
  LDAP_ENABLED: {{ .Values.externalAuth.ldap.enabled | quote }}
  LDAP_HOST: {{ .Values.externalAuth.ldap.host }}
  LDAP_PORT: {{ .Values.externalAuth.ldap.port | quote }}
  LDAP_METHOD: {{ .Values.externalAuth.ldap.method }}
  {{- if .Values.externalAuth.ldap.tls_no_verify }}
  LDAP_TLS_NO_VERIFY: {{ .Values.externalAuth.ldap.tls_no_verify | quote }}
  {{- end }}
  {{- if .Values.externalAuth.ldap.base }}
  LDAP_BASE: {{ .Values.externalAuth.ldap.base }}
  {{- end }}
  {{- if .Values.externalAuth.ldap.bind_dn }}
  LDAP_BIND_DN: {{ .Values.externalAuth.ldap.bind_dn }}
  {{- end }}
  {{- with .Values.externalAuth.ldap.password }}
  LDAP_PASSWORD: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.ldap.uid }}
  LDAP_UID: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.ldap.mail }}
  LDAP_MAIL: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.ldap.search_filter }}
  LDAP_SEARCH_FILTER: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.ldap.uid_conversion.enabled }}
  LDAP_UID_CONVERSION_ENABLED: {{ . | quote }}
  {{- end }}
  {{- with .Values.externalAuth.ldap.uid_conversion.search }}
  LDAP_UID_CONVERSION_SEARCH: {{ . }}
  {{- end }}
  {{- with .Values.externalAuth.ldap.uid_conversion.replace }}
  LDAP_UID_CONVERSION_REPLACE: {{ . }}
  {{- end }}
  {{- end }}
  {{- if .Values.mastodon.metrics.statsd.address }}
  STATSD_ADDR: {{ .Values.mastodon.metrics.statsd.address }}
  {{- else if .Values.mastodon.metrics.statsd.exporter.enabled }}
  STATSD_ADDR: localhost:9125
  {{- end }}
  {{- range $k, $v := .Values.mastodon.extraEnvVars }}
  {{ $k }}: {{ quote $v }}
  {{- end }}

  {{- if .Values.mastodon.deepl.enabled }}
  DEEPL_PLAN: {{ .Values.mastodon.deepl.plan }}
  {{- end }}

  {{- if .Values.mastodon.hcaptcha.enabled }}
  HCAPTCHA_SITE_KEY: {{ .Values.mastodon.hcaptcha.siteId }}
  {{- end }}

  {{- if .Values.mastodon.cacheBuster.enabled }}
  CACHE_BUSTER_ENABLED: "true"
    {{- if .Values.mastodon.cacheBuster.httpMethod }}
  CACHE_BUSTER_HTTP_METHOD: {{ .Values.mastodon.cacheBuster.httpMethod }}
    {{- end }}
    {{- if .Values.mastodon.cacheBuster.authHeader }}
  CACHE_BUSTER_SECRET_HEADER: {{ .Values.mastodon.cacheBuster.authHeader }}
    {{- end }}
  {{- else }}
  CACHE_BUSTER_ENABLED: "false"
  {{- end }}
  {{- with .Values.timezone }}
  TZ: {{ . | quote }}
  {{- end }}