Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation

roles/web-app-peertube/vars/configuration.yml

@@ -0,0 +1,33 @@
+version:              "bookworm"
+features:
+  matomo:             true
+  css:                false
+  portfolio_iframe:   true
+  central_database:   true
+  oidc:               true
+csp:
+  flags:
+    script-src-elem:
+      unsafe-inline:  true
+    script-src:
+      unsafe-inline:  true
+    style-src:
+      unsafe-inline:  true
+  whitelist:
+    frame-ancestors:
+      - "*"
+    media-src:
+      - "blob:"
+    font-src:
+      - "data:"
+domains:
+  canonical:
+    - "video.{{ primary_domain }}"
+  aliases:
+    - "videos.{{ primary_domain }}"
+docker:
+  services:
+    redis:
+      enabled: true
+    database: 
+      enabled: true

roles/web-app-peertube/vars/main.yml

@@ -0,0 +1,4 @@
+application_id: "peertube"
+database_type:  "postgres"
+container_name: "{{ application_id }}"
+oidc_plugin:    "peertube-plugin-auth-openid-connect"

roles/web-app-peertube/vars/oidc-settings.yml

@@ -0,0 +1,12 @@
+oidc_settings: |
+  {
+    "scope": "openid email profile",
+    "desktop-id": "{{ oidc.client.id }}",
+    "discover-url": "{{ oidc.client.discovery_document }}",
+    "desktop-secret": "{{ oidc.client.secret }}",
+    "mail-property": "email",
+    "auth-display-name": "{{ oidc.button_text }}",
+    "username-property": "{{ oidc.attributes.username }}",
+    "signature-algorithm": "RS256",
+    "display-name-property": "{{ oidc.attributes.username }}"
+  }