Restructured server config

2025-08-29 15:06:26 +02:00 · 2025-08-07 11:31:06 +02:00
parent 99c6c9ec92
commit 9228d51e86
69 changed files with 770 additions and 677 deletions
--- a/roles/web-app-keycloak/config/main.yml
+++ b/roles/web-app-keycloak/config/main.yml
@@ -7,20 +7,21 @@ features:
  central_database:   true
  recaptcha:          true
  logout:             true
-csp:
-  flags:
-    script-src-elem:
-      unsafe-inline: true
-    script-src:
-      unsafe-inline: true
-    style-src:
-      unsafe-inline: true
-  whitelist:
-    frame-src:
-      - "*" # For frontend channel logout it's necessary that iframes can be loaded
-domains:
-  canonical:
-    - "auth.{{ primary_domain }}"
+server:
+  csp:
+    flags:
+      script-src-elem:
+        unsafe-inline: true
+      script-src:
+        unsafe-inline: true
+      style-src:
+        unsafe-inline: true
+    whitelist:
+      frame-src:
+        - "*" # For frontend channel logout it's necessary that iframes can be loaded
+  domains:
+    canonical:
+      - "auth.{{ primary_domain }}"
 scopes:
  rbac_roles: rbac_roles
  nextcloud:  nextcloud