---

random_pwd_length: '50'
tmp_pwd_file_prefix: '/tmp/.ansibleguy.sw_zoneminder'

ZM_HC:
  packages:
    dependencies: ['gpg']
    tools: ['ncdu', 'iotop', 'iftop']
    base: ['zoneminder']

  repo_key: "https://zmrepo.zoneminder.com/{{ ansible_distribution | lower }}/archive-keyring.gpg"
  repo: "deb https://zmrepo.zoneminder.com/{{ ansible_distribution | lower }}/release {{ ansible_lsb.codename | default('buster') }}/"
  php_version: '7.4'

  apache:
    modules: ['ssl', 'headers', 'rewrite', 'http2', 'cgi']

  database:
    schema_file: '/usr/share/zoneminder/db/zm_create.sql'


default_zm:
  tools: false  # install admin-tools for disk-space & i/o troubleshooting
  timezone: ''
  add_repo: false  # not needed on debian

  manage:
    db: true
    webserver: true

  path:
    data: '/usr/share/zoneminder'
    bin: '/usr/bin'
    lib: '/usr/lib/x86_64-linux-gnu'
    conf: '/etc/zm'
    web: '/usr/share/zoneminder/www'
    cgi: '/usr/lib/zoneminder/cgi-bin'
    cache: '/var/cache/zoneminder'

  apache:
    # domain:
    aliases: []
    admin: 'zoneminder@template.ansibleguy.net'
    port_plain: 80
    port_ssl: 443

    mode: 'serve'  # DO NOT CHANGE!
    app_include: true  # DO NOT CHANGE!

    ssl:  # see: https://github.com/ansibleguy/infra_certs
      mode: 'selfsigned'  # existing/selfsigned/ca/letsencrypt
      cert:
        name:
        cn: 'NextCloud Certificate'
        org: 'AnsibleGuy'

    security: {}  # see: https://github.com/ansibleguy/infra_apache

  database:
    name: 'zm'
    user: 'zoneminder'
    # default => random pwd will be generated
    pwd: "{{ lookup('password', tmp_pwd_file_prefix + '_mysql chars=ascii_letters,digits length=' + random_pwd_length) }}"
    settings: {}  # mariadb setting overrides

    # ONLY CHANGE IF DB IS NOT MANAGED BY ROLE!
    update_password: 'always'  # or 'on_create'
    type: 'mysql'
    host: 'localhost'
    # port_socket:

ZM_CONFIG: "{{ default_zm | combine(zoneminder, recursive=true) }}"

ZM_MARIADB_INSTANCE: "{{ {
  'dbs': {
    ZM_CONFIG.database.name: {
      'encoding': 'utf8',
      'collation': 'utf8_bin'
    },
  },
  'users': {
    ZM_CONFIG.database.user: {
      'priv': ZM_CONFIG.database.name + '.*:ALL',
      'pwd': ZM_CONFIG.database.pwd,
      'update_pwd': ZM_CONFIG.database.update_password
    },
  },
  'settings': ZM_CONFIG.database.settings,
  'socket': '/run/mysqld/mysqld_zoneminder.sock'
} }}"  # DO NOT CHANGE!

NONE_VALUES: [none, '', ' ']
zm_apache_path:
  serve:
    path: "{{ ZM_CONFIG.path.web }}"