{% set tpl = ix_lib.base.render.Render(values) %}

{% set core = tpl.add_container(values.consts.core_container_name, "image") %}
{% set periphery = tpl.add_container(values.consts.periphery_container_name, "periphery_image") %}

{% set perm_container = tpl.deps.perms(values.consts.perms_container_name) %}
{% set perms_config = {"uid": values.consts.run_as_user, "gid": values.consts.run_as_group, "mode": "check"} %}

{% set mongo_config = {
  "user": values.consts.db_user,
  "password": values.komodo.db_password,
  "database": values.consts.db_name,
  "volume": values.storage.mongodb_data,
} %}
{% set mongo = tpl.deps.mongodb(values.consts.mongo_container_name, "mongo_image", mongo_config, perm_container) %}

{# Prevent Komodo from stopping itself with StopAllContainers #}
{% do core.labels.add_label("komodo.skip", "true") %}
{% do periphery.labels.add_label("komodo.skip", "true") %}
{% do mongo.container.labels.add_label("komodo.skip", "true") %}

{# Periphery #}
{% do periphery.healthcheck.disable() %}

{% do periphery.environment.add_env("PERIPHERY_PASSKEYS", ([values.komodo.passkey] + values.komodo.additional_passkeys)|unique|list|join(",")) %}
{% do periphery.environment.add_env("PERIPHERY_SSL_ENABLED", true) %}
{% do periphery.environment.add_env("PERIPHERY_PORT", values.consts.internal_periphery_port) %}
{% do periphery.environment.add_user_envs(values.komodo.additional_envs) %}

{% do periphery.add_docker_socket(read_only=False) %}
{% do periphery.add_storage("/proc", {"type": "host_path", "host_path_config": {"path": "/proc", "read_only": False}}) %}

{# Note that the PERIPHERY_ROOT_DIRECTORY (container path) must be the SAME path as the host path #}
{% set periphery_host_path = tpl.funcs.get_host_path(values.storage.periphery_root) %}
{% do periphery.add_storage(periphery_host_path, values.storage.periphery_root) %}
{% do periphery.environment.add_env("PERIPHERY_ROOT_DIRECTORY", periphery_host_path) %}

{# Core #}
{% do core.healthcheck.set_test("curl", {
  "port": values.network.web_port.port_number,
  "path": "/auth/GetLoginOptions", "method": "POST",
  "data": {}, "headers": [("Content-Type", "application/json")],
}) %}
{% do core.depends.add_dependency(values.consts.mongo_container_name, "service_healthy") %}

{% do core.environment.add_env("KOMODO_PASSKEY", values.komodo.passkey) %}
{% do core.environment.add_env("KOMODO_LOCAL_AUTH", values.komodo.local_auth) %}
{% do core.environment.add_env("KOMODO_DISABLE_USER_REGISTRATION", not values.komodo.allow_registration) %}
{% do core.environment.add_env("KOMODO_ENABLE_NEW_USERS", values.komodo.auto_enable_new_users) %}
{% do core.environment.add_env("KOMODO_FIRST_SERVER", "https://%s:%d"|format(values.consts.periphery_container_name, values.consts.internal_periphery_port)) %}
{% do core.environment.add_env("KOMODO_PORT", values.network.web_port.port_number) %}
{% do core.environment.add_env("KOMODO_DATABASE_ADDRESS", mongo.get_url("host_port")) %}
{% do core.environment.add_env("KOMODO_DATABASE_USERNAME", values.consts.db_user) %}
{% do core.environment.add_env("KOMODO_DATABASE_PASSWORD", values.komodo.db_password) %}
{% do core.environment.add_env("KOMODO_DATABASE_DB_NAME", values.consts.db_name) %}
{% do core.environment.add_env("KOMODO_SYNC_DIRECTORY", values.consts.syncs_directory) %}

{% do core.environment.add_user_envs(values.komodo.additional_envs) %}

{% do core.add_port(values.network.web_port) %}

{% do core.add_storage("/backups", values.storage.backups) %}
{% do core.add_storage(values.consts.syncs_directory, values.storage.syncs) %}

{% for store in values.storage.additional_storage %}
  {% do core.add_storage(store.mount_path, store) %}
  {% do periphery.add_storage(store.mount_path, store) %}
{% endfor %}

{% if perm_container.has_actions() %}
  {% do perm_container.activate() %}
  {% do mongo.container.depends.add_dependency(values.consts.perms_container_name, "service_completed_successfully") %}
{% endif %}

{% do tpl.portals.add(values.network.web_port) %}

{{ tpl.render() | tojson }}