Finished Funkwhale implementation

roles/docker-funkwhale/vars/configuration.yml

@@ -1,17 +1,36 @@
-images:               
-  api:        "funkwhale/api:1.4.0"
-  front:      "funkwhale/front:1.4.0"
-  typesense:  "typesense/typesense"
+docker:
+  versions:               
+    api:        "1.4.0"
+    front:      "1.4.0"
+    typesense:  "typesense/typesense"
+  images:               
+    api:        "funkwhale/api"
+    front:      "funkwhale/front"
+    typesense:  "typesense/typesense"
 features:
   matomo:             true
-  css:                true
+  css:                false
   portfolio_iframe:   true
   ldap:               true
   central_database:   true
+  oauth2:             false # Doesn't make sense to activate it atm, because login is possible on homepage
 credentials:
 domains:
   canonical:
     - "audio.{{ primary_domain }}"
   aliases:
     - "music.{{ primary_domain }}"
-    - "sound.{{ primary_domain }}"
+    - "sound.{{ primary_domain }}"
+csp:  
+  flags:
+    style-src:
+      unsafe-inline:  true
+  whitelist:
+    font-src:
+      -  "data:"
+oauth2_proxy:  
+  application:        "front"
+  port:               "80"
+  acl:
+    blacklist:
+      - "/login"

roles/docker-funkwhale/vars/main.yml

@@ -1,7 +1,8 @@
 application_id:                                 "funkwhale"
 nginx_docker_reverse_proxy_extra_configuration: "client_max_body_size 512M;"
 database_type:                                  "postgres"
-media_root:                                     "/srv/funkwhale/data/"
-static_root:                                    "{{media_root}}static"
+funkwhale_media_root:                           "/srv/funkwhale/data/"
+funkwhale_static_root:                          "{{funkwhale_media_root}}static"
 celeryd_concurrency:                            1
-music_directory_path:                           "/music"
+funkwhale_music_directory_path:                 "/music"
+funkwhale_docker_api_port:                      5000