feat(web-opt-rdr-domains): add optional logout proxy injection for redirect-only domains

This change introduces the variable 'web_opt_rdr_domains_logout_enabled' allowing redirect-only domains to include the logout-proxy configuration when required (e.g., BlueSky canonical domain deactivation edge cases).
It ensures the logout endpoint is still properly served even when the domain is normally redirected.

Conversation: https://chatgpt.com/share/6932f3a5-3890-800f-a100-a2d36762ffd4
This commit is contained in:
2025-12-05 16:01:35 +01:00
parent ecfdac6764
commit cb4e750317
3 changed files with 17 additions and 4 deletions

View File

@@ -1,6 +1,17 @@
server {
server_name {{ domain }};
{% include 'roles/sys-svc-letsencrypt/templates/ssl_header.j2' %}
return 301 https://{{ target }}$request_uri;
{% if web_opt_rdr_domains_logout_enabled: | bool %}
{#
Required for edge cases e.g. BlueSky where a canonical domain is deactivated,
and set as an alias but interpretated as an logout domain
#}
{% include 'roles/web-svc-logout/templates/logout-proxy.conf.j2' %}
{% endif %}
location / {
return 301 {{ WEB_PROTOCOL }}://{{ target }}$request_uri;
}
}