Renamed injection services

roles/sys-srv-web-inj-compose/templates/location.lua.j2

@@ -0,0 +1,77 @@
+{% macro push_snippets(list_name, features) -%}
+{% for f in features -%}
+{% if inj_enabled.get(f) -%}
+{{ list_name }}[#{{ list_name }} + 1] = [=[
+  {%- include
+     'roles/sys-srv-web-inj-' ~ f ~
+     '/templates/' ~
+     ('head' if list_name == 'head_snippets' else 'body') ~
+     '_sub.j2'
+  -%}
+]=]
+{% endif -%}
+{% endfor -%}
+{%- endmacro %}
+
+lua_need_request_body on;
+
+header_filter_by_lua_block {
+    local ct = ngx.header.content_type or ""
+    if ct:lower():find("^text/html") then
+        ngx.ctx.is_html = true
+    else
+        ngx.ctx.is_html = false
+    end
+}
+
+body_filter_by_lua_block {
+    -- only apply further processing if this is an HTML response
+    if not ngx.ctx.is_html then
+        return
+    end
+
+    -- initialize or reuse the buffer
+    ngx.ctx.buf = ngx.ctx.buf or {}
+    local chunk, eof = ngx.arg[1], ngx.arg[2]
+
+    if chunk ~= "" then
+        table.insert(ngx.ctx.buf, chunk)
+    end
+
+    if not eof then
+        -- drop intermediate chunks; we’ll emit only on eof
+        ngx.arg[1] = nil
+        return
+    end
+
+    -- on eof: concatenate all buffered chunks
+    local whole = table.concat(ngx.ctx.buf)
+    ngx.ctx.buf = nil  -- clear buffer
+
+    -- remove html CSP, due to management via infinito nexus policies
+    whole = whole:gsub(
+        '<meta[^>]-http%-equiv=["\']Content%-Security%-Policy["\'][^>]->%s*',
+        ''
+    )
+
+    -- build a list of head-injection snippets
+    local head_snippets = {}
+
+    {{ push_snippets('head_snippets', ['css','matomo','desktop','javascript','logout']) }}
+
+    -- inject all collected snippets right before </head>
+    local head_payload = table.concat(head_snippets, "\n") .. "</head>"
+    whole = string.gsub(whole, "</head>", head_payload)
+
+    -- build a list of body-injection snippets
+    local body_snippets = {}
+
+    {{ push_snippets('body_snippets', ['matomo','logout','desktop']) }}
+
+    -- inject all collected snippets right before </body>
+    local body_payload = table.concat(body_snippets, "\n") .. "</body>"
+    whole = string.gsub(whole, "</body>", body_payload)
+
+    -- finally send the modified HTML out
+    ngx.arg[1] = whole
+}

roles/sys-srv-web-inj-compose/templates/server.conf.j2

@@ -0,0 +1,7 @@
+{% if inj_enabled.css %}
+{% include 'roles/sys-srv-web-inj-css/templates/location.conf.j2' %}
+{% endif %}
+
+{% if inj_enabled.logout %}
+{% include 'roles/web-svc-logout/templates/logout-proxy.conf.j2' %}
+{% endif %}