Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation

roles/web-app-friendica/vars/configuration.yml

@@ -0,0 +1,32 @@
+images:
+  friendica:          "friendica:latest"
+features:
+  matomo:             true
+  css:                false # Temporary deactivated
+  portfolio_iframe:   true
+  oidc:               false # Implementation doesn't work yet
+  central_database:   true
+  ldap:               true
+  oauth2:             false # No special login side which could be protected, use 2FA of Friendica instead
+domains:
+  canonical:
+    - "social.{{ primary_domain }}"
+csp:
+  flags:
+    script-src-elem:
+      unsafe-inline:  true
+    script-src:
+      unsafe-inline:  true
+      unsafe-eval:    true
+    style-src:
+      unsafe-inline:  true
+oauth2_proxy:  
+  application:        "application"
+  port:               "80"
+addons:
+  keycloakpassword: {}
+  ldapauth: {}
+docker:
+  services:
+    database:
+      enabled: true

roles/web-app-friendica/vars/main.yml

@@ -0,0 +1,8 @@
+application_id:     "friendica"
+database_type:      "mariadb"
+
+friendica_no_validation:       "{{ applications[application_id].features.oidc }}" # Email validation is not neccessary if OIDC is active
+friendica_application_base:    "/var/www/html"
+friendica_docker_ldap_config:  "{{friendica_application_base}}/config/ldapauth.config.php"
+friendica_host_ldap_config:    "{{ docker_compose.directories.volumes }}ldapauth.config.php"
+