apiVersion: v1
kind: ConfigMap
metadata:
  name: {{ include "openwork-ee.configName" . }}
  labels:
    {{- include "openwork-ee.labels" . | nindent 4 }}
data:
  CI: "true"
  NODE_ENV: "production"
  OPENWORK_DEV_MODE: {{ .Values.config.openworkDevMode | quote }}
  DEN_API_NODE_OPTIONS: {{ .Values.config.denApiNodeOptions | quote }}
  # SECURITY: Enables non-local redis:// DATABASE_REDIS_URL values only for
  # trusted private networks. Keep false for public or cross-network Redis;
  # prefer rediss:// whenever the provider supports TLS.
  DATABASE_REDIS_ALLOW_INSECURE_INTERNAL: {{ ternary "1" "0" .Values.redis.allowInsecureInternal | quote }}
  DB_MODE: {{ .Values.config.databaseMode | quote }}
  DEN_ORG_MODE: {{ .Values.config.tenancy.mode | quote }}
  DEN_SINGLE_ORG_NAME: {{ .Values.config.tenancy.singleOrgName | quote }}
  DEN_SINGLE_ORG_SLUG: {{ .Values.config.tenancy.singleOrgSlug | quote }}
  DEN_SINGLE_ORG_OWNER_EMAILS: {{ .Values.config.tenancy.ownerEmails | quote }}
  DEN_SINGLE_ORG_ALLOW_PUBLIC_SIGNUP: {{ .Values.config.tenancy.allowPublicSignup | quote }}
  DEN_REQUIRE_EMAIL_VERIFICATION: {{ .Values.config.tenancy.requireEmailVerification | quote }}
  DEN_PASSWORD_BREACH_SCREENING_ENABLED: {{ .Values.config.auth.passwordBreachScreeningEnabled | quote }}
  GITHUB_CONNECTOR_APP_ID: {{ .Values.config.githubConnector.appId | quote }}
  GITHUB_CONNECTOR_APP_CLIENT_ID: {{ .Values.config.githubConnector.clientId | quote }}
  DEN_BASE_URL: {{ .Values.config.public.webOrigin | quote }}
  {{ if .Values.config.public.webOrigin }}
  # Compatibility alias for older Den builds; current den-api derives it from DEN_BASE_URL.
  BETTER_AUTH_URL: {{ .Values.config.public.webOrigin | quote }}
  {{ end }}
  {{ if .Values.config.public.mcpResourceUrl }}
  DEN_MCP_RESOURCE_URL: {{ .Values.config.public.mcpResourceUrl | quote }}
  {{ end }}
  # Extra MCP resource URLs beyond the DEN_API_PUBLIC_URL API origin and web-app defaults.
  {{ if .Values.config.public.mcpAdditionalResources }}
  DEN_MCP_ADDITIONAL_RESOURCES: {{ .Values.config.public.mcpAdditionalResources | quote }}
  {{ end }}
  DEN_MCP_CLAIM_NAMESPACE: {{ .Values.config.public.mcpClaimNamespace | quote }}
  {{ if .Values.config.public.betterAuthTrustedOrigins }}
  DEN_BETTER_AUTH_TRUSTED_ORIGINS: {{ .Values.config.public.betterAuthTrustedOrigins | quote }}
  {{ end }}
  {{ if .Values.config.public.betterAuthCookieDomain }}
  DEN_BETTER_AUTH_COOKIE_DOMAIN: {{ .Values.config.public.betterAuthCookieDomain | quote }}
  {{ end }}
  {{ if .Values.config.public.webAppHosts }}
  DEN_WEB_APP_HOSTS: {{ .Values.config.public.webAppHosts | quote }}
  {{ end }}
  DEN_BOOTSTRAP_ADMIN_EMAILS: {{ .Values.config.public.bootstrapAdminEmails | quote }}
  DEN_INSTALL_LINKS_GATING_ENABLED: {{ .Values.config.public.installLinksGatingEnabled | quote }}
  DEN_AUTOMATIONS_ENABLED: {{ .Values.config.public.automationsEnabled | quote }}
  DEN_DASHBOARDS_ENABLED: {{ .Values.config.public.dashboardsEnabled | quote }}
  DEN_OPENWORK_WEB_ENABLED: {{ .Values.config.public.openworkWebEnabled | quote }}
  DEN_AUTOMATIONS_RUNTIME_ENABLED: {{ .Values.config.public.automationsRuntimeEnabled | quote }}
  DEN_GENERATED_ARTIFACT_VIEWS_ENABLED: {{ .Values.config.public.generatedArtifactViewsEnabled | quote }}
  DEN_CONNECT_LINK_MODE: {{ .Values.config.public.connectLinkMode | quote }}
  {{ if .Values.config.public.connectLinkKeyId }}
  DEN_CONNECT_LINK_KEY_ID: {{ .Values.config.public.connectLinkKeyId | quote }}
  {{ end }}
  {{ if .Values.config.public.corsOrigins }}
  CORS_ORIGINS: {{ .Values.config.public.corsOrigins | quote }}
  DEN_CORS_ORIGINS: {{ .Values.config.public.corsOrigins | quote }}
  {{ end }}
  {{ if .Values.config.public.apiOrigin }}
  DEN_API_PUBLIC_URL: {{ .Values.config.public.apiOrigin | quote }}
  {{ end }}
  {{ if .Values.config.public.desktopDenBaseUrl }}
  DEN_DESKTOP_DEN_BASE_URL: {{ .Values.config.public.desktopDenBaseUrl | quote }}
  {{ end }}
  {{ if .Values.config.public.installerReleaseTag }}
  OPENWORK_INSTALLER_RELEASE_TAG: {{ .Values.config.public.installerReleaseTag | quote }}
  {{ end }}
  {{ if .Values.config.public.installerReleaseRepo }}
  OPENWORK_INSTALLER_RELEASE_REPO: {{ .Values.config.public.installerReleaseRepo | quote }}
  {{ end }}
  PROVISIONER_MODE: {{ .Values.config.provisioner.mode | quote }}
  WORKER_PROVISIONING_RECONCILE_INTERVAL_MS: {{ .Values.config.provisioner.reconcileIntervalMs | quote }}
  WORKER_PROVISIONING_RECONCILE_STALE_MS: {{ .Values.config.provisioner.reconcileStaleMs | quote }}
  WORKER_PROVISIONING_RECONCILE_BATCH_SIZE: {{ .Values.config.provisioner.reconcileBatchSize | quote }}
  WORKER_URL_TEMPLATE: {{ .Values.config.provisioner.workerUrlTemplate | quote }}
  {{ if or .Values.inference.enabled .Values.config.internal.inferenceProxyBaseUrl }}
  INFERENCE_PROXY_BASE_URL: {{ include "openwork-ee.inferenceInternalUrl" . | quote }}
  {{ end }}
  POLAR_FEATURE_GATE_ENABLED: {{ .Values.config.polar.featureGateEnabled | quote }}
  DAYTONA_SIGNED_PREVIEW_EXPIRES_SECONDS: {{ .Values.config.daytona.signedPreviewExpiresSeconds | quote }}
  DEN_API_BASE: {{ include "openwork-ee.denApiInternalUrl" . | quote }}
  DEN_AUTH_FALLBACK_BASE: {{ include "openwork-ee.authFallbackInternalUrl" . | quote }}
  DEN_AUTH_ORIGIN: {{ .Values.config.public.webOrigin | quote }}
  DEN_WEB_PUBLIC_ORIGIN: {{ .Values.config.public.webOrigin | quote }}
  DEN_WEB_OPENWORK_AUTH_CALLBACK_URL: {{ .Values.config.public.authCallbackUrl | quote }}
  {{ with .Values.config.polar.apiBase }}
  POLAR_API_BASE: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.polar.productId }}
  POLAR_PRODUCT_ID: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.polar.benefitId }}
  POLAR_BENEFIT_ID: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.polar.successUrl }}
  POLAR_SUCCESS_URL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.polar.returnUrl }}
  POLAR_RETURN_URL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.apiUrl }}
  DAYTONA_API_URL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.target }}
  DAYTONA_TARGET: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.snapshot }}
  DAYTONA_SNAPSHOT: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxImage }}
  DAYTONA_SANDBOX_IMAGE: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxCpu }}
  DAYTONA_SANDBOX_CPU: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxMemory }}
  DAYTONA_SANDBOX_MEMORY: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxDisk }}
  DAYTONA_SANDBOX_DISK: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxPublic }}
  DAYTONA_SANDBOX_PUBLIC: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxAutoStopInterval }}
  DAYTONA_SANDBOX_AUTO_STOP_INTERVAL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxAutoArchiveInterval }}
  DAYTONA_SANDBOX_AUTO_ARCHIVE_INTERVAL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxAutoDeleteInterval }}
  DAYTONA_SANDBOX_AUTO_DELETE_INTERVAL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sandboxNamePrefix }}
  DAYTONA_SANDBOX_NAME_PREFIX: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sharedVolumeName }}
  DAYTONA_SHARED_VOLUME_NAME: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.volumeNamePrefix }}
  DAYTONA_VOLUME_NAME_PREFIX: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.workspaceMountPath }}
  DAYTONA_WORKSPACE_MOUNT_PATH: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.dataMountPath }}
  DAYTONA_DATA_MOUNT_PATH: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.runtimeWorkspacePath }}
  DAYTONA_RUNTIME_WORKSPACE_PATH: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.runtimeDataPath }}
  DAYTONA_RUNTIME_DATA_PATH: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.sidecarDir }}
  DAYTONA_SIDECAR_DIR: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.openworkPort }}
  DAYTONA_OPENWORK_PORT: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.opencodePort }}
  DAYTONA_OPENCODE_PORT: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.createTimeoutSeconds }}
  DAYTONA_CREATE_TIMEOUT_SECONDS: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.deleteTimeoutSeconds }}
  DAYTONA_DELETE_TIMEOUT_SECONDS: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.daytona.healthcheckTimeoutMs }}
  DAYTONA_HEALTHCHECK_TIMEOUT_MS: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.inference.openRouterWorkspaceId }}
  OPENROUTER_WORKSPACE_ID: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.inference.stripeInferencePriceId }}
  STRIPE_INFERENCE_PRICE_ID: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.inference.openRouterUpstreamUrl }}
  OPENROUTER_UPSTREAM_URL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.inference.creditsPerDollar }}
  INFERENCE_CREDITS_PER_DOLLAR: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.public.openworkAppConnectUrl }}
  DEN_WEB_OPENWORK_APP_CONNECT_URL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.public.openworkWebUrl }}
  DEN_WEB_OPENWORK_WEB_URL: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.web.posthogKey }}
  DEN_WEB_POSTHOG_KEY: {{ . | quote }}
  {{ end }}
  {{ with .Values.config.web.posthogHost }}
  DEN_WEB_POSTHOG_HOST: {{ . | quote }}
  {{ end }}