Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation

roles/web-app-matomo/vars/configuration.yml

@@ -0,0 +1,32 @@
+images:
+  matomo:             "matomo:latest"
+features:
+  matomo:             true
+  css:                false
+  portfolio_iframe:   true
+  central_database:   true
+  oauth2:             false
+csp:
+  whitelist:
+    script-src-elem:
+      - https://cdn.matomo.cloud
+    style-src:
+      - https://fonts.googleapis.com
+  flags:
+    script-src:
+      unsafe-eval:   true
+    script-src-elem:
+      unsafe-inline: true
+      unsafe-eval:   true
+    style-src:
+      unsafe-inline: true
+      unsafe-eval:   true
+domains:
+  aliases:
+    - "analytics.{{ primary_domain }}"
+excluded_ips: "{{ networks.internet.values() | list }}"
+
+docker:
+  services:
+    database:
+      enabled: true

roles/web-app-matomo/vars/main.yml

@@ -0,0 +1,10 @@
+---
+application_id:       "matomo"
+database_type:        "mariadb"
+matomo_excluded_ips:  "{{ applications.matomo.excluded_ips }}"
+matomo_index_php_url: "{{ domains | get_url('matomo', web_protocol) }}/index.php"
+matomo_auth_token:    "{{ applications.matomo.credentials.auth_token }}"
+
+
+# I don't know if this is still necessary
+domain:               "{{ domains | get_domain(application_id) }}"