Restructured server config

roles/web-app-wordpress/config/main.yml

@@ -14,32 +14,33 @@ features:
   oidc:               true
   central_database:   true
   logout:   true
-csp:
-  flags:
-    style-src:
-      unsafe-inline:  true
-    script-src-elem:
-      unsafe-inline:  true
-    script-src:
-      unsafe-eval:    true
-  whitelist:
-    worker-src:
-      - "blob:"
-    font-src:
-      - "data:"
-      - "https://fonts.bunny.net"
-    script-src-elem:
-      - "https://cdn.gtranslate.net"    # Necessary for translation plugins
-      - "https://translate.google.com"  # Necessary for translation plugins
+server:
+  csp:
+    flags:
+      style-src:
+        unsafe-inline:  true
+      script-src-elem:
+        unsafe-inline:  true
+      script-src:
+        unsafe-eval:    true
+    whitelist:
+      worker-src:
+        - "blob:"
+      font-src:
+        - "data:"
+        - "https://fonts.bunny.net"
+      script-src-elem:
+        - "https://cdn.gtranslate.net"    # Necessary for translation plugins
+        - "https://translate.google.com"  # Necessary for translation plugins
+        - "blog.{{ primary_domain }}"
+      style-src:
+        - "https://fonts.bunny.net"
+      frame-src:
+        - "blob:"
+        - "*"
+  domains:
+    canonical:
       - "blog.{{ primary_domain }}"
-    style-src:
-      - "https://fonts.bunny.net"
-    frame-src:
-      - "blob:"
-      - "*"
-domains:
-  canonical:
-    - "blog.{{ primary_domain }}"
 docker:
   services:
     database:

roles/web-app-wordpress/tasks/main.yml

@@ -6,7 +6,7 @@
 - name: "Include role srv-proxy-6-6-domain for {{ application_id }}"
   include_role:
     name: srv-proxy-6-6-domain
-  loop: "{{ applications | get_app_conf(application_id, 'domains.canonical', True) }}"
+  loop: "{{ applications | get_app_conf(application_id, 'server.domains.canonical', True) }}"
   loop_control:
     loop_var: domain
   vars: