[gerrit]
        basePath = git
        canonicalWebUrl = {{ gerrit_config_canonical_weburl }}

[container]
        javaOptions = {{ gerrit_container_java_options }}
        user = {{ gerrit_user }}
        heapLimit = {{ gerrit_container_heap_limit }}
        javaHome = /usr/lib/jvm/jre/

[index]
        type = {{ gerrit_index_type }}

[auth]
        type = {{ gerrit_auth_type }}
        userNameCaseInsensitive = true
{% if gerrit_auth_type == 'OAUTH' %}
        gitBasicAuthPolicy = HTTP
[plugin "oauth-keycloak-oauth"]
        root-url = {{ oauth_base_url }}
        realm = {{ oauth_realm }}
        client-id = {{ oauth_client_id }}
        client-secret = {{ oauth_client_secret }}
{% endif %}

[receive]
        enableSignedPush = true
        checkReferencedObjectsAreReachable = {{ gerrit_referenced_objects_reachable }}

[sendemail]
        smtpServer = localhost

[sshd]
        listenAddress = {{ gerrit_sshd_listen_address }}
        threads = {{ gerrit_sshd_threads }}

[httpd]
        listenUrl = {{ gerrit_httpd_listen_url }}

[cache]
        directory = cache

{% if gerrit_auth_type == "LDAP" %}
[ldap]
        server = {{ ldap_url_list|join(' ') }}
        accountBase = cn=users,cn=accounts,dc=rockylinux,dc=org
        accountPattern = (&(objectClass=posixAccount)(memberOf=cn=signed_rgca,cn=groups,cn=accounts,dc=rockylinux,dc=org)(uid=${username}))
        accountFullName = displayName
        accountEmailAddress = mail
        accountMemberField = memberOf
        groupBase = cn=groups,cn=accounts,dc=rockylinux,dc=org
        groupPattern = (cn=${groupname})
        localUsernameToLowerCase = true
        startTls = true
        sslVerify = true
{% endif %}

[plugin "avatars-gravatar"]
        url = https://seccdn.libravatar.org/avatar/