Raw refactoring of roles

roles/docker-peertube/meta/schema.yml

@@ -0,0 +1,10 @@
+credentials:
+  database_password:
+    description: "Password for the PeerTube PostgreSQL database"
+    algorithm: "bcrypt"
+    validation: "^\\$2[aby]\\$.{56}$"
+
+  secret:
+    description: "PeerTube secret used for session signing and CSRF protection"
+    algorithm: "sha256"
+    validation: "^[a-f0-9]{64}$"

roles/docker-peertube/templates/env.j2

@@ -1,9 +1,9 @@
 # Database / Postgres service configuration
 POSTGRES_USER={{database_username}}
-POSTGRES_PASSWORD={{peertube_database_password}}
+POSTGRES_PASSWORD={{applications[application_id].credentials.database_password}}
 POSTGRES_DB={{database_name}}
 PEERTUBE_DB_USERNAME={{database_username}}
-PEERTUBE_DB_PASSWORD={{peertube_database_password}}
+PEERTUBE_DB_PASSWORD={{applications[application_id].credentials.database_password}}
 PEERTUBE_DB_SSL=false
 PEERTUBE_DB_HOSTNAME={{database_host}}
 
@@ -11,7 +11,7 @@ PEERTUBE_DB_HOSTNAME={{database_host}}
 PEERTUBE_WEBSERVER_HOSTNAME={{domains[application_id]}}
 PEERTUBE_TRUST_PROXY=["127.0.0.1", "loopback"]
 
-PEERTUBE_SECRET={{peertube_secret}}
+applications[application_id].credentials.secret={{applications[application_id].credentials.secret}}
 
 # E-mail configuration
 PEERTUBE_SMTP_USERNAME={{ users['no-reply'].email }}

roles/docker-peertube/vars/configuration.yml

@@ -0,0 +1,6 @@
+version:              "bookworm"
+features:
+  matomo:             true
+  css:                true
+  landingpage_iframe: false
+  central_database:   true

roles/docker-peertube/vars/main.yml

@@ -1,3 +1,3 @@
 application_id:  	  "peertube"
 database_type:      "postgres"
-database_password:  "{{peertube_database_password}}"
+database_password:  "{{applications[application_id].credentials.database_password}}"