opencloud_domain: "opencloud.local.test"
opencloud_admin_password: "admin"
opencloud_extra_hosts:
  - "opencloud.local.test:host-gateway"
  - "keycloak.local.test:host-gateway"

# OIDC configuration (Keycloak)
opencloud_oidc_issuer: "https://keycloak.local.test/realms/vagrant"
opencloud_oidc_client_id: "opencloud"
opencloud_oidc_client_secret: "opencloud-secret-change-in-production"
opencloud_oidc_account_edit_url: "https://keycloak.local.test/realms/vagrant/account"

# Allow OpenCloud to connect to Keycloak for OIDC discovery
opencloud_csp_extra_connect_src:
  - "https://keycloak.local.test/"