Renamed general and mode constants and implemented a check to verify that constants are just defined ones over the whole repository

roles/web-app-mailu/config/main.yml

@@ -1,7 +1,7 @@
 oidc:
   email_by_username:      true                    # If true, then the mail is set by the username. If wrong then the OIDC user email is used
   enable_user_creation:   true                    # Users will be created if not existing
-domain:                   "{{ primary_domain }}"  # The main domain from which mails will be send \ email suffix behind @                              
+domain:                   "{{ PRIMARY_DOMAIN }}"  # The main domain from which mails will be send \ email suffix behind @                              
 features:
   matomo:                 true
   css:                    false
@@ -12,7 +12,7 @@ features:
 server:
   domains:
     canonical:
-      - "mail.{{ primary_domain }}"
+      - "mail.{{ PRIMARY_DOMAIN }}"
   csp:
     flags:
       style-src:

roles/web-app-mailu/tasks/01_core.yml

@@ -13,7 +13,7 @@
   include_tasks: 02_create-mailu-user.yml
   vars:
     mailu_compose_dir:        "{{ docker_compose.directories.instance }}"
-    mailu_domain:             "{{ primary_domain }}"
+    mailu_domain:             "{{ PRIMARY_DOMAIN }}"
     mailu_api_base_url:       "http://127.0.0.1:8080/api/v1"
     mailu_global_api_token:   "{{ applications | get_app_conf(application_id, 'credentials.api_token') }}"
     mailu_action: >-
@@ -33,4 +33,4 @@
 
 - name: Set Mailu DNS records
   include_tasks: 04_set-mailu-dns-records.yml
-  when: dns_provider == 'cloudflare'
+  when: DNS_PROVIDER == 'cloudflare'

roles/web-app-mailu/templates/env.j2

@@ -195,7 +195,7 @@ OIDC_CHANGE_PASSWORD_REDIRECT_URL={{oidc.client.change_credentials}}
 OIDC_USERNAME_CLAIM={{oidc.attributes.username}}
 
 # The domain used when constructing an email from a non-email username (e.g., when OIDC_USERNAME_CLAIM=sub). Ignored if OIDC_USERNAME_CLAIM is already an email. Defaults to the value of DOMAIN.
-OIDC_USER_DOMAIN={{primary_domain}}
+OIDC_USER_DOMAIN={{PRIMARY_DOMAIN}}
 {% endif %}
 
 # If enabled, users who authenticate successfully but do not yet have an account will have one created for them. If disabled, only existing users can log in, and authentication will fail for users without a pre-existing account. Defaults to True.

roles/web-app-mailu/users/main.yml

@@ -1,3 +1,3 @@
 users:
   administrator:
-    email:                "administrator@{{ primary_domain }}"   # Administrator Email for DNS Records
+    email:                "administrator@{{ PRIMARY_DOMAIN }}"   # Administrator Email for DNS Records

roles/web-app-mailu/vars/mailu-dns.yml

@@ -3,7 +3,7 @@
 mailu_dns_zone: "{{ applications | get_app_conf(application_id, 'domain', True) }}"
 mailu_dns_ip:   "{{ networks.internet.ip4 }}"
 
-cloudflare_record_api_token: "{{ certbot_dns_api_token }}"
+cloudflare_record_api_token: "{{ CERTBOT_DNS_API_TOKEN }}"
 
 mailu_dmarc_ruf:    "{{ applications | get_app_conf(application_id, 'users.administrator.email', True) }}"