---
# Prowlarr container image and version
prowlarr_image: lscr.io/linuxserver/prowlarr
prowlarr_version: latest

# Network
prowlarr_port: 9696

# Timezone
prowlarr_timezone: UTC

# Config holds the SQLite database (indexers, API keys, settings)
prowlarr_config_dir: "{{ podman_projects_dir }}/prowlarr/config"

# Backup manifest - consumed by roles/backup via inventory `backup_jobs`
prowlarr_backup_paths:
  - "{{ prowlarr_config_dir }}"

# Nginx reverse proxy configuration
prowlarr_nginx_enabled: false
prowlarr_nginx_hostname: prowlarr.nas.local
# Let's Encrypt (certbot) requires a publicly-resolvable hostname. Internal
# names (e.g. *.nas.local) cannot get a public cert: leave this false to use
# the shared self-signed cert (nginx_default_ssl_cert). Set true once a public
# DNS record points at the host.
prowlarr_nginx_letsencrypt: false
prowlarr_nginx_ssl_certificate: >-
  {{ prowlarr_nginx_letsencrypt | ternary(
     '/etc/letsencrypt/live/' ~ prowlarr_nginx_hostname ~ '/fullchain.pem',
     nginx_default_ssl_cert) }}
prowlarr_nginx_ssl_certificate_key: >-
  {{ prowlarr_nginx_letsencrypt | ternary(
     '/etc/letsencrypt/live/' ~ prowlarr_nginx_hostname ~ '/privkey.pem',
     nginx_default_ssl_key) }}