# OpenZaak setup_configuration (idempotent, declarative).
# Provisions the JWT client the seed + ACL use to call OpenZaak's APIs.
# Dev-only credentials — not for production.
#
# Steps come from vng_api_common.contrib.setup_configuration (see ADR-0002).

vng_api_common_credentials_config_enable: true
vng_api_common_credentials:
  items:
    - identifier: big-reference-seed
      secret: insecure-dev-secret-change-me

vng_api_common_applicaties_config_enable: true
vng_api_common_applicaties:
  items:
    # uuid must be given explicitly as a string (the step's auto-default is a
    # UUID object that fails its own validation).
    - uuid: "11111111-1111-4111-8111-111111111111"
      client_ids:
        - big-reference-seed
      label: BIG reference seed client
      heeft_alle_autorisaties: true

# ── OpenZaak → Open Notificaties (NRC) publishing (S-01-c, #56) ─────────────
# The NRC service OpenZaak posts notifications to, authenticating with the same
# big-reference-seed client (NRC verifies the JWT and authorizes it via the AC).
zgw_consumers_config_enable: true
zgw_consumers:
  services:
    - identifier: nrc
      label: Open Notificaties
      api_type: nrc
      api_root: http://nrc-web:8000/api/v1/
      auth_type: zgw
      client_id: big-reference-seed
      secret: insecure-dev-secret-change-me

# Point OpenZaak's notifications at that service. Requires NOTIFICATIONS_DISABLED=false.
notifications_config_enable: true
notifications_config:
  notifications_api_service_identifier: nrc