Optimized more CSP policies and recaptcha

roles/docker-keycloak/vars/configuration.yml

@@ -4,12 +4,14 @@ users:
     username:         "{{users.administrator.username}}"  # Administrator Username for Keycloak
 import_realm:         True                                # If True realm will be imported. If false skip.
 credentials:
-#   database_password:                                    # Needs to be defined in inventory file
-#   administrator_password:                               # Needs to be defined in inventory file
 features:
   matomo:             true
   css:                true
-  portfolio_iframe: true
+  portfolio_iframe:   true
   ldap:               true
   central_database:   true
-  recaptcha:          true
+  recaptcha:          true
+csp:
+  flags:
+    script-src:
+      unsafe-inline: true

roles/docker-keycloak/vars/main.yml

@@ -1,4 +1,4 @@
-application_id:            "keycloak"
+application_id:           "keycloak"
 database_type:            "postgres"
 container_name:           "{{application_id}}_application"
 realm:                    "{{primary_domain}}"                              # This is the name of the default realm which is used by the applications

roles/docker-moodle/vars/configuration.yml

@@ -1,23 +1,24 @@
-site_titel:         "Global Learning Academy on {{primary_domain}}"
+site_titel:           "Global Learning Academy on {{primary_domain}}"
 users:
   administrator:
-    username:       "{{users.administrator.username}}"
-    email:          "{{users.administrator.email}}"
-version:            "latest"
+    username:         "{{users.administrator.username}}"
+    email:            "{{users.administrator.email}}"
+version:              "latest"
 features:
   matomo:             true
-  css:                true
-  portfolio_iframe: false
+  css:                false
+  portfolio_iframe:   false
   central_database:   true
 csp:
   flags:
     script-src:
-      unsafe-inline: true
-      unsafe-eval:   true
+      unsafe-inline:  true
+      unsafe-eval:    true
     style-src:
-      unsafe-inline: true
+      unsafe-inline:  true
   whitelist:
     font-src:
       - "data:"
       - "blob:"
+    script-src:
       - "https://cdn.jsdelivr.net"

roles/docker-peertube/vars/configuration.yml

@@ -2,7 +2,7 @@ version:              "bookworm"
 features:
   matomo:             true
   css:                true
-  portfolio_iframe: false
+  portfolio_iframe:   false
   central_database:   true
 csp:
   flags:

roles/docker-wordpress/vars/configuration.yml

@@ -28,10 +28,9 @@ csp:
       - "blob:"
     font-src:
       - "data:"
+      - "https://fonts.bunny.net"
     script-src:
       - "https://cdn.gtranslate.net"
       - "{{ domains.wordpress[0] }}"
-    frame-src:
-      - "{{ domains.peertube }}"
     style-src:
       - "https://fonts.bunny.net"