ansible-role-sso/templates/cadoles-pod-hydra-dispatcher-v1.conf.j2

# {{ ansible_managed }}
PODMAN_ARGS="\
    --name 'cadoles-pod-hydra-dispatcher-v1' \
    --replace \
    --network=slirp4netns:allow_host_loopback=true \
    --tz=local \
    -p 127.0.0.1:3000:8080 \
    -e APP_ENV=prod \
    -e 'APP_DEBUG={{ hydra_dispatcher_debug }}' \
    -e HYDRA_ADMIN_BASE_URL=http://10.0.2.2:4445 \
    -e HYDRA_BASE_URL=http://10.0.2.2:4444 \
    -e HYDRA_REWRITE_ISSUER=no \
    -e 'HYDRA_ORIGINAL_ISSUER={{ haproxy_public_base_url }}' \
    -e 'HYDRA_NEW_ISSUER={{ haproxy_public_base_url }}' \
    -e 'BASE_URL={{ haproxy_public_base_url }}{{ haproxy_hydra_dispatcher_base_path }}' \
    -e 'COOKIE_PATH={{ hydra_dispatcher_cookie_path }}' \
    -e 'DEFAULT_LOCALE={{ hydra_dispatcher_default_locale }}' \
    -e 'APP_LOCALES={{ hydra_dispatcher_available_locales | join(',') }}' \
    -e 'HYDRA_ADMIN_AUTHORIZED_HOSTS={{ hydra_dispatcher_admin_authorized_hosts | join(',') }}' \
    -e 'TRUSTED_PROXIES=127.0.0.1,10.0.2.0/24' \
    -e 'SENTRY_DSN={{ hydra_dispatcher_sentry_dsn }}' \
    -e 'SENTRY_ENVIRONMENT={{ hydra_dispatcher_sentry_environment }}' \
    -e 'REDIS_DSN={{ hydra_dispatcher_redis_dsn }}' \
    --mount type=tmpfs,tmpfs-size=512M,destination=/app/var/cache \
    -e 'DISABLE_APP_AUTO_SELECT={{ hydra_dispatcher_disable_app_auto_select }}' \
    -e 'PHP_FPM_MEMORY_LIMIT=128m' \
    -e 'PHP_FPM_MAX_CHILDREN=128' \
    -e 'PHP_FPM_START_SERVERS=42' \
    -e 'PHP_FPM_MIN_SPARE_SERVERS=24' \
    -e 'PHP_FPM_MAX_SPARE_SERVERS=64' \
    -v /etc/hydra-dispatcher/www.conf.gotmpl:/etc/php81/php-fpm.d/www.conf.gotmpl \
    -v /etc/hydra-dispatcher/conf.d:/app/config/hydra \
    {% for item in hydra_dispatcher_mounts %}
    -v {{ item.host }}:{{ item.container }} \
    {% endfor %}
"