From a1a266ba5744d9cbf052d01e0ddaa9135a33dff3 Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Thu, 15 Jan 2026 08:03:55 +0100
Subject: [PATCH] web-app-snipe-it: make APP_FORCE_TLS depend on global TLS
 flag

- Bind APP_FORCE_TLS to TLS_ENABLED instead of forcing it unconditionally
- Align Snipe-IT TLS behavior with reverse proxy and global TLS configuration
- Fix missing newline at end of vars file

https://chatgpt.com/share/696890d1-0954-800f-8ad7-887562c620d3
---
 roles/web-app-snipe-it/templates/env.j2 | 2 +-
 roles/web-app-snipe-it/vars/main.yml    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/web-app-snipe-it/templates/env.j2 b/roles/web-app-snipe-it/templates/env.j2
index e988ca430b..a6655e8358 100644
--- a/roles/web-app-snipe-it/templates/env.j2
+++ b/roles/web-app-snipe-it/templates/env.j2
@@ -163,7 +163,7 @@ LOG_CHANNEL=stderr
 LOG_MAX_DAYS=10
 APP_LOCKED=false
 APP_CIPHER=AES-256-CBC
-APP_FORCE_TLS=true
+APP_FORCE_TLS={{ TLS_ENABLED | string | lower }}
 GOOGLE_MAPS_API=
 LDAP_MEM_LIM=500M
 LDAP_TIME_LIM=600
\ No newline at end of file
diff --git a/roles/web-app-snipe-it/vars/main.yml b/roles/web-app-snipe-it/vars/main.yml
index 451ecb6fa7..ec18ec55b6 100644
--- a/roles/web-app-snipe-it/vars/main.yml
+++ b/roles/web-app-snipe-it/vars/main.yml
@@ -14,4 +14,4 @@ SNIPE_IT_USER:      "www-data"
 
 # Authentification
 SNIPE_IT_OAUTH2_ENABLED:  "{{ applications | get_app_conf(application_id, 'docker.services.oauth2.enabled') }}"
-SNIPE_IT_LDAP_ENABLED:    "{{ applications | get_app_conf(application_id, 'docker.services.ldap.enabled') }}"
\ No newline at end of file
+SNIPE_IT_LDAP_ENABLED:    "{{ applications | get_app_conf(application_id, 'docker.services.ldap.enabled') }}"