mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-07-18 06:24:25 +02:00
Solved dependency bug which appeared due to autogeneration of meta/main.yml files
This commit is contained in:
parent
0b80ba6f54
commit
944707ec41
@ -38,7 +38,7 @@ categories:
|
|||||||
icon: "fas fa-project-diagram"
|
icon: "fas fa-project-diagram"
|
||||||
injector:
|
injector:
|
||||||
core:
|
core:
|
||||||
title: "srv-web-injector-core"
|
title: "srv-web-injector-compose"
|
||||||
description: "Inject core HTML modifiers"
|
description: "Inject core HTML modifiers"
|
||||||
icon: "fas fa-code"
|
icon: "fas fa-code"
|
||||||
css:
|
css:
|
||||||
|
@ -2,7 +2,7 @@
|
|||||||
|
|
||||||
This Ansible role composes and orchestrates all necessary HTTPS-layer tasks and HTML-content injections for your webserver domains. It integrates two key sub-roles into a unified workflow:
|
This Ansible role composes and orchestrates all necessary HTTPS-layer tasks and HTML-content injections for your webserver domains. It integrates two key sub-roles into a unified workflow:
|
||||||
|
|
||||||
1. **`srv-web-injector-core`**
|
1. **`srv-web-injector-compose`**
|
||||||
Injects global HTML snippets (CSS, Matomo tracking, iFrame notifier, custom JavaScript) into responses using Nginx `sub_filter`.
|
Injects global HTML snippets (CSS, Matomo tracking, iFrame notifier, custom JavaScript) into responses using Nginx `sub_filter`.
|
||||||
2. **`srv-web-tls-core`**
|
2. **`srv-web-tls-core`**
|
||||||
Handles issuing, renewing, and managing TLS certificates via ACME/Certbot.
|
Handles issuing, renewing, and managing TLS certificates via ACME/Certbot.
|
||||||
|
@ -29,5 +29,5 @@ galaxy_info:
|
|||||||
issue_tracker_url: "https://github.com/kevinveenbirkenbach/cymais/issues"
|
issue_tracker_url: "https://github.com/kevinveenbirkenbach/cymais/issues"
|
||||||
documentation: "https://github.com/kevinveenbirkenbach/cymais/roles/srv-web-composer"
|
documentation: "https://github.com/kevinveenbirkenbach/cymais/roles/srv-web-composer"
|
||||||
dependencies:
|
dependencies:
|
||||||
- srv-web-injector-core
|
- srv-web-injector-compose
|
||||||
- srv-web-tls-core
|
- srv-web-tls-core
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
- name: "include role srv-web-injector-core for {{domain}}"
|
- name: "include role srv-web-injector-compose for {{domain}}"
|
||||||
include_role:
|
include_role:
|
||||||
name: srv-web-injector-core
|
name: srv-web-injector-compose
|
||||||
|
|
||||||
- name: "include role srv-web-tls-core for {{domain}}"
|
- name: "include role srv-web-tls-core for {{domain}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -15,14 +15,13 @@ galaxy_info:
|
|||||||
- theming
|
- theming
|
||||||
repository: "https://github.com/kevinveenbirkenbach/cymais"
|
repository: "https://github.com/kevinveenbirkenbach/cymais"
|
||||||
issue_tracker_url: "https://github.com/kevinveenbirkenbach/cymais/issues"
|
issue_tracker_url: "https://github.com/kevinveenbirkenbach/cymais/issues"
|
||||||
documentation: "https://github.com/kevinveenbirkenbach/cymais/tree/main/roles/srv-web-injector-core"
|
documentation: "https://github.com/kevinveenbirkenbach/cymais/tree/main/roles/srv-web-injector-compose"
|
||||||
min_ansible_version: "2.9"
|
min_ansible_version: "2.9"
|
||||||
platforms:
|
platforms:
|
||||||
- name: Any
|
- name: Any
|
||||||
versions:
|
versions:
|
||||||
- all
|
- all
|
||||||
dependencies:
|
dependencies:
|
||||||
- srv-web-injector-matomo
|
# The injections are called in the script. Keep the logic there.
|
||||||
- srv-web-injector-css
|
- srv-web-core
|
||||||
- srv-web-injector-iframe
|
|
||||||
- srv-web-injector-javascript
|
|
@ -1,4 +1,4 @@
|
|||||||
# Load this role via srv-web-injector-core for consistency
|
# Load this role via srv-web-injector-compose for consistency
|
||||||
|
|
||||||
- name: Generate color palette with colorscheme-generator
|
- name: Generate color palette with colorscheme-generator
|
||||||
set_fact:
|
set_fact:
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
# Load this role via srv-web-injector-core for consistency
|
# Load this role via srv-web-injector-compose for consistency
|
||||||
|
|
||||||
- name: "Relevant variables for role: {{ role_path | basename }}"
|
- name: "Relevant variables for role: {{ role_path | basename }}"
|
||||||
debug:
|
debug:
|
||||||
|
@ -6,7 +6,7 @@ server
|
|||||||
{% include 'roles/web-app-oauth2-proxy/templates/endpoint.conf.j2'%}
|
{% include 'roles/web-app-oauth2-proxy/templates/endpoint.conf.j2'%}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
|
|
||||||
{% if nginx_docker_reverse_proxy_extra_configuration is defined %}
|
{% if nginx_docker_reverse_proxy_extra_configuration is defined %}
|
||||||
{# Additional Domain Specific Configuration #}
|
{# Additional Domain Specific Configuration #}
|
||||||
|
@ -7,7 +7,7 @@ server {
|
|||||||
server_name {{ domain }};
|
server_name {{ domain }};
|
||||||
|
|
||||||
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2' %}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2' %}
|
||||||
|
|
||||||
client_max_body_size {{ client_max_body_size | default('100m') }};
|
client_max_body_size {{ client_max_body_size | default('100m') }};
|
||||||
keepalive_timeout 70;
|
keepalive_timeout 70;
|
||||||
|
@ -8,7 +8,7 @@ This role bootstraps **per-domain Nginx configuration**: it requests TLS certifi
|
|||||||
|
|
||||||
A higher-level orchestration wrapper, *srv-web-proxy-domain* ties together several lower-level roles:
|
A higher-level orchestration wrapper, *srv-web-proxy-domain* ties together several lower-level roles:
|
||||||
|
|
||||||
1. **`srv-web-injector-core`** – applies global tweaks and includes.
|
1. **`srv-web-injector-compose`** – applies global tweaks and includes.
|
||||||
2. **`srv-web-tls-core`** – obtains Let’s Encrypt certificates.
|
2. **`srv-web-tls-core`** – obtains Let’s Encrypt certificates.
|
||||||
3. **Domain template deployment** – copies a Jinja2 vHost from *srv-web-proxy-core*.
|
3. **Domain template deployment** – copies a Jinja2 vHost from *srv-web-proxy-core*.
|
||||||
4. **`web-app-oauth2-proxy`** *(optional)* – protects the site with OAuth2.
|
4. **`web-app-oauth2-proxy`** *(optional)* – protects the site with OAuth2.
|
||||||
|
@ -3,7 +3,7 @@ server {
|
|||||||
|
|
||||||
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
|
|
||||||
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
||||||
|
|
||||||
|
@ -11,6 +11,6 @@ server {
|
|||||||
listen 8448 ssl default_server;
|
listen 8448 ssl default_server;
|
||||||
listen [::]:8448 ssl default_server;
|
listen [::]:8448 ssl default_server;
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
{% include 'roles/srv-web-proxy-core/templates/location/proxy_basic.conf.j2' %}
|
{% include 'roles/srv-web-proxy-core/templates/location/proxy_basic.conf.j2' %}
|
||||||
}
|
}
|
@ -6,7 +6,7 @@ server
|
|||||||
|
|
||||||
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
# Remove X-Powered-By, which is an information leak
|
# Remove X-Powered-By, which is an information leak
|
||||||
fastcgi_hide_header X-Powered-By;
|
fastcgi_hide_header X-Powered-By;
|
||||||
|
|
||||||
|
@ -3,7 +3,7 @@ server {
|
|||||||
|
|
||||||
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
|
|
||||||
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
||||||
|
|
||||||
|
@ -6,7 +6,7 @@ server
|
|||||||
{% include 'roles/web-app-oauth2-proxy/templates/endpoint.conf.j2'%}
|
{% include 'roles/web-app-oauth2-proxy/templates/endpoint.conf.j2'%}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
|
|
||||||
{% if nginx_docker_reverse_proxy_extra_configuration is defined %}
|
{% if nginx_docker_reverse_proxy_extra_configuration is defined %}
|
||||||
{# Additional Domain Specific Configuration #}
|
{# Additional Domain Specific Configuration #}
|
||||||
|
@ -4,7 +4,7 @@ server
|
|||||||
|
|
||||||
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
|
|
||||||
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
||||||
charset utf-8;
|
charset utf-8;
|
||||||
|
@ -4,7 +4,7 @@ server
|
|||||||
|
|
||||||
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
{% include 'roles/net-letsencrypt/templates/ssl_header.j2' %}
|
||||||
|
|
||||||
{% include 'roles/srv-web-injector-core/templates/global.includes.conf.j2'%}
|
{% include 'roles/srv-web-injector-compose/templates/global.includes.conf.j2'%}
|
||||||
|
|
||||||
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
{% include 'roles/srv-web-proxy-core/templates/headers/content_security_policy.conf.j2' %}
|
||||||
charset utf-8;
|
charset utf-8;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user