# ── PARTNERSHIP ───────────────────────────────────────────────────────────────────────────────
# ==============================================================================================
# HOST1 is always the owner (source of truth) unless --transfer has been run.
# See README-Partnership.md and master.conf PARTNERSHIP section for full lifecycle docs.

# Auth containers reconfigured on onboard/offboard.
# Format: "ContainerName|WebUIPort"
# On onboard → WebUI pointed at owner's Tailscale IP (mirror clicks NPM, gets owner's auth)
# On offboard → WebUI pointed back at localhost
    HOST1_PARTNERSHIP_AUTH_WEBUIS=(
        "NginxProxyManager|81"
        "Lldap-Gmer4Lfe|17170"
        "Authelia|9091"
        "Authelia-Secondary|9092"
    )

# XML templates (from this server's templates-user/) pushed to mirror during onboard.
# These become the mirror's active auth stack, backed by the rsync-synced appdata.
# Update filename if Lldap is renamed to drop the host suffix.
    HOST1_PARTNERSHIP_AUTH_STACK=(
        # Dependencies first — Mariadb/Redis must be healthy before Authelia starts
        "my-Mariadb-Authelia.xml"
        "my-Mariadb-Authelia-Secondary.xml"
        "my-Redis-Authelia.xml"
        "my-Redis-Authelia-Secondary.xml"
        # Auth apps — deployed after their deps are confirmed healthy
        "my-Authelia.xml"
        "my-Authelia-Secondary.xml"
        "my-NginxProxyManager.xml"
        "my-Lldap-Gmer4Lfe.xml"
        # Source of truth — must be available on HOST2 independently of the auth stack
        "my-Gitea.xml"
    )

# XML templates pushed to mirror for the arr stack during onboard.
# Deps (e.g. databases) first if any — same ordering rule as auth stack.
    HOST1_PARTNERSHIP_ARR_STACK=(
         "my-Sonarr.xml"
         "my-Radarr.xml"
         "my-Lidarr.xml"
         "my-Prowlarr.xml"
         "my-Bazarr.xml"
    )