---
stalwart_version: "0.15.5"

stalwart_system_user: "stalwart"
stalwart_system_group: "stalwart"

stalwart_service_state: "started"
stalwart_service_enabled: true

stalwart_server_hostname: "mail.rubenhensen.nl"
stalwart_server_max_connections: 8192

# Storage backend
stalwart_storage_data: "rocksdb"
stalwart_storage_fts: "rocksdb"
stalwart_storage_blob: "rocksdb"
stalwart_storage_lookup: "rocksdb"

# Admin credentials
stalwart_fallback_admin_login: "admin"
stalwart_fallback_admin_password: "changeme!"  # override via vault in host_vars

# Listeners
stalwart_server_listeners:
  - name: "smtp"
    bind: "[::]:25"
    protocol: "smtp"
  - name: "submission"
    bind: "[::]:587"
    protocol: "smtp"
  - name: "submissions"
    bind: "[::]:465"
    protocol: "smtp"
    options:
      tls.implicit: true
  - name: "imaptls"
    bind: "[::]:993"
    protocol: "imap"
    options:
      tls.implicit: true
  - name: "https"
    bind: "127.0.0.1:8443"
    protocol: "http"
    options:
      tls.implicit: true
  - name: "http"
    bind: "127.0.0.1:8080"
    protocol: "http"

# Stores
stalwart_stores:
  - name: "rocksdb"
    type: "rocksdb"
    options:
      path: "{{ stalwart_data_path }}"
      compression: "lz4"
  - name: "postgresql"
    type: "postgresql"
    options:
      host: "127.0.0.1"
      port: 5432
      database: "{{ stalwart_db_name }}"
      user: "{{ stalwart_db_user }}"
      password: "{{ stalwart_db_password }}"

# Directory
stalwart_directory_type: "sql"
stalwart_directory_options:
  store: "postgresql"

# Database
stalwart_db_name: "stalwart"
stalwart_db_user: "stalwart"
stalwart_db_password: "{{ vault_stalwart_db_password }}"

# Tracers
stalwart_tracers:
  - type: "stdout"
    options:
      level: "info"
      ansi: false
      enable: true
  - type: "log"
    options:
      level: "info"
      path: "{{ stalwart_logs_path }}"
      prefix: "stalwart.log"
      rotate: "daily"
      ansi: false
      enable: true

# TLS certificate (managed by certbot)
stalwart_tls_cert: "/etc/letsencrypt/live/{{ stalwart_server_hostname }}/fullchain.pem"
stalwart_tls_key: "/etc/letsencrypt/live/{{ stalwart_server_hostname }}/privkey.pem"

# Extra config sections (list of {name, options} dicts)
stalwart_additional_configs: []