Whitelisted Server IP's and implemented deactivation option for ldap user directory in nextcloud

roles/docker-matomo/tasks/main.yml

@@ -18,4 +18,18 @@
 - name: run the docker matomo tasks once
   set_fact:
     run_once_docker_matomo: true
-  when: run_once_docker_matomo is not defined
+  when: run_once_docker_matomo is not defined
+
+- name: Exclude global IPs in Matomo
+  uri:
+    url: "{{ matomo_index_php_url }}"
+    method: POST
+    body_format: form-urlencoded
+    body:
+      module: API
+      method: SitesManager.setGlobalExcludedIps
+      excludedIps: "{{ matomo_excluded_ips | join(',') }}"
+      format: json
+      token_auth: "{{ matomo_auth_token }}"
+    return_content: yes
+    status_code: 200

roles/docker-matomo/vars/configuration.yml

@@ -23,4 +23,5 @@ csp:
       unsafe-eval:   true
 domains:
   aliases:
-    - "analytics.{{ primary_domain }}"
+    - "analytics.{{ primary_domain }}"
+excluded_ips: "{{ networks.internet.values() | list }}"

roles/docker-matomo/vars/main.yml

@@ -1,6 +1,10 @@
 ---
-application_id:     "matomo"
-database_type:      "mariadb"
+application_id:       "matomo"
+database_type:        "mariadb"
+matomo_excluded_ips:  "{{ applications.matomo.excluded_ips }}"
+matomo_index_php_url: "{{ web_protocol }}://{{ domains | get_domain('matomo') }}/index.php"
+matomo_auth_token:    "{{ applications.matomo.credentials.auth_token }}"
+
 
 # I don't know if this is still necessary
-domain:             "{{ domains | get_domain(application_id) }}"
+domain:               "{{ domains | get_domain(application_id) }}"