# Include{groups}
portals: {}
questions:
# Include{global}
# Include{workload}
# Include{workloadDeployment}

# Include{replicas1}
# Include{podSpec}
# Include{containerMain}
# Include{containerBasic}
# Include{containerAdvanced}
# Include{containerConfig}
# Include{podOptions}

  - variable: snowflake
    group: App Configuration
    label: Snowflake Proxy Configuration
    schema:
      additional_attrs: true
      type: dict
      attrs:
        - variable: allow_non_tls_relay
          label: Allow Non TLS Relay
          description: Allow relay without tls encryption
          schema:
            type: boolean
            default: false
        - variable: allowed_relay_hostname_pattern
          label: Allow Relay Hostname pattern
          description: A pattern to specify allowed hostname pattern for relay URL.
          schema:
            type: string
            required: true
            default: snowflake.torproject.net$
        - variable: broker
          label: Broker
          description: Broker URL
          schema:
            type: string
            required: true
            default: https://snowflake-broker.torproject.net/
        - variable: capacity
          label: Capacity
          description: Maximum concurrent clients (0 for unlimited)
          schema:
            type: int
            required: true
            default: 0
        - variable: ephemeral_ports_range
          label: Ephemeral Ports Range
          description: ICE UDP ephemeral ports range in format ("30000:60000")
          schema:
            type: string
            default: "59999:60000"
        - variable: keep_local_addresses
          label: Keep Local Addresses
          description: Keep local LAN address ICE candidates
          schema:
            type: boolean
            default: false
        - variable: nat_retest_interval
          label: NAT Retest Interval
          description: The time interval in second before NAT type is retested, 0s disables retest. Valid time units are s, m, h.
          schema:
            type: string
            required: true
            default: 24h0m0s
        - variable: relay
          label: Relay
          description: Websocket Relay URL
          schema:
            type: string
            required: true
            default: wss://snowflake.bamsoftware.com/
        - variable: stun
          label: Stun
          description: STUN URL
          schema:
            type: string
            required: true
            default: stun:stun.stunprotocol.org:3478
        - variable: summary_interval
          label: Summary Interval
          description: The time interval to output summary, 0s disables summaries. Valid time units are s, m, h.
          schema:
            type: string
            required: true
            default: 1h0m0s
        - variable: unsafe_logging
          label: Unsafe Logging
          description: Prevent logs from being scrubbed
          schema:
            type: boolean
            default: false
        - variable: verbose
          label: Verbose
          description: Increase log verbosity
          schema:
            type: boolean
            default: false
        - variable: log
          label: Log
          description: Log Filename
          schema:
            type: string
            default: ""

# Include{serviceExpertRoot}
# Include{serviceList}
# Include{persistenceList}
# Include{securityContextRoot}

              - variable: runAsUser
                label: "runAsUser"
                description: "The UserID of the user running the application"
                schema:
                  type: int
                  default: 1000
              - variable: runAsGroup
                label: "runAsGroup"
                description: "The groupID of the user running the application"
                schema:
                  type: int
                  default: 1000
# Include{securityContextContainer}
# Include{securityContextAdvanced}
# Include{securityContextPod}
              - variable: fsGroup
                label: "fsGroup"
                description: "The group that should own ALL storage."
                schema:
                  type: int
                  default: 568

# Include{resources}
# Include{advanced}
# Include{addons}
# Include{codeserver}
# Include{netshoot}
# Include{vpn}
# Include{documentation}