refactor(ansible): normalize include_role syntax and unify host config paths via path_join

- Remove stray spaces after include_role: across many roles to ensure clean YAML and
  consistent linting/formatting.
- Listmonk:
  - Introduce LISTMONK_CONFIG_HOST = [ docker_compose.directories.config, 'config.toml' ] | path_join
  - Use that var in the template task (dest) and the docker-compose volume mount
- Matrix:
  - Build MATRIX_SYNAPSE_CONFIG_PATH_HOST, MATRIX_SYNAPSE_LOG_PATH_HOST, and
    MATRIX_ELEMENT_CONFIG_PATH_HOST via path_join
- Mobilizon:
  - Build mobilizon_host_conf_exs_file via path_join
  - Keep get_app_conf strictness unchanged (defaults to True in our filter), so behavior
    remains strict even though the explicit third arg was dropped
- Simpleicons:
  - Build server.js and package.json host paths via path_join
- Numerous web-app roles (Confluence, Discourse, EspoCRM, Friendica, Funkwhale, Gitea,
  GitLab, Jenkins, Joomla, Listmonk, Mailu, Mastodon, Matomo, Matrix, MediaWiki,
  Mobilizon, Moodle, Nextcloud, OpenProject, Peertube, Pixelfed, Pretix, Roulette Wheel,
  Snipe-IT, Syncope, Taiga, WordPress, XWiki, Yourls) and web-svc roles (coturn,
  libretranslate, simpleicons) updated for consistent include_role formatting

Why:
- path_join avoids double slashes and missing separators across different config roots
- Consistent include_role: formatting improves readability and prevents linter noise

Ref:
- Conversation: https://chatgpt.com/share/68d14711-727c-800f-b454-7dc4c3c1f4cb

roles/svc-db-openldap/tasks/main.yml

@@ -1,7 +1,7 @@
 ---
 
 - name: "include docker-compose role"
-  include_role: 
+  include_role:
     name: docker-compose
 
 - name: Create {{ domains | get_domain(application_id) }}.conf if LDAP is exposed to internet

roles/svc-prx-openresty/tasks/main.yml

@@ -1,6 +1,6 @@
 - block:
   - name: "For '{{ application_id }}': Load docker-compose"
-    include_role: 
+    include_role:
       name: docker-compose
     vars:
       docker_compose_flush_handlers:  true

roles/sys-stk-back-stateless/tasks/main.yml

@@ -1,7 +1,7 @@
 # run_once_sys_stk_back_stateless: disabled
 
 - name: "For '{{ application_id }}': Load docker-compose"
-  include_role: 
+  include_role:
     name: docker-compose
   vars:
     docker_compose_flush_handlers: false

roles/sys-stk-full-stateless/tasks/main.yml

@@ -9,5 +9,5 @@
     http_port:   "{{ ports.localhost.http[application_id] }}"
 
 - name: "For '{{ application_id }}': Load sys-stk-back-stateless"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateless

roles/sys-util-csp-cert/tasks/main.yml

@@ -1,9 +1,9 @@
 # run_once_sys_util_csp_cert: deactivated
 
 - name: "include role sys-front-inj-all for '{{ domain }}'"
-  include_role: 
+  include_role:
     name: sys-front-inj-all
 
 - name: "include role sys-svc-certs for '{{ domain }}'"
-  include_role: 
+  include_role:
     name: sys-svc-certs

roles/web-app-baserow/tasks/main.yml

@@ -1,4 +1,4 @@
 ---
 - name: "For '{{ application_id }}': load docker, db and proxy"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful

roles/web-app-bluesky/tasks/main.yml

@@ -1,5 +1,5 @@
 - name: "include docker-compose role"
-  include_role: 
+  include_role:
     name: docker-compose
   vars:
     docker_compose_flush_handlers: false

roles/web-app-confluence/tasks/main.yml

@@ -1,7 +1,7 @@
 ---
 - block:
   - name: "load docker, db and proxy for {{ application_id }}"
-    include_role: 
+    include_role:
       name: sys-stk-full-stateful
   - include_tasks: utils/run_once.yml
   when: run_once_web_app_confluence is not defined

roles/web-app-discourse/tasks/03_docker.yml

@@ -5,7 +5,7 @@
     state: present
 
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   vars:
     docker_compose_flush_handlers: true

roles/web-app-espocrm/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   vars:
     docker_compose_flush_handlers:  true

roles/web-app-friendica/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 - name: Integrate LDAP

roles/web-app-funkwhale/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 

roles/web-app-fusiondirectory/tasks/main.yml

@@ -1,3 +1,3 @@
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful

roles/web-app-gitea/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 - name: Wait for Gitea HTTP endpoint

roles/web-app-gitlab/tasks/main.yml

@@ -1,4 +1,4 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful

roles/web-app-jenkins/tasks/main.yml

@@ -1,4 +1,4 @@
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 

roles/web-app-joomla/tasks/main.yml

@@ -9,7 +9,7 @@
     http_port: "{{ ports.localhost.http[application_id] }}"
 
 - name: "load docker and db for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateful
   vars:
     docker_compose_flush_handlers: true

roles/web-app-listmonk/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   vars:
     docker_compose_flush_handlers: false
@@ -14,7 +14,7 @@
 - name: add config.toml
   template: 
     src:  "config.toml.j2" 
-    dest: "{{ docker_compose.directories.config }}config.toml"
+    dest: "{{ LISTMONK_CONFIG_HOST }}"
   notify: docker compose up
 
 - meta: flush_handlers

roles/web-app-listmonk/templates/docker-compose.yml.j2

@@ -7,7 +7,7 @@
     ports:
       - "127.0.0.1:{{ ports.localhost.http[application_id] }}:{{ container_port }}"
     volumes:
-      - {{ docker_compose.directories.config }}config.toml:/listmonk/config.toml
+      - {{ LISTMONK_CONFIG_HOST }}:/listmonk/config.toml
 {% include 'roles/docker-container/templates/networks.yml.j2' %}
 {% include 'roles/docker-container/templates/depends_on/dmbs_excl.yml.j2' %}
 {% include 'roles/docker-container/templates/healthcheck/wget.yml.j2' %}

roles/web-app-listmonk/vars/main.yml

@@ -7,6 +7,7 @@ container_port:               "{{ applications | get_app_conf(application_id, 'd
 LISTMONK_VERSION:             "{{ applications | get_app_conf(application_id, 'docker.services.listmonk.version') }}"
 LISTMONK_IMAGE:               "{{ applications | get_app_conf(application_id, 'docker.services.listmonk.image') }}"
 LISTMONK_NAME:                "{{ applications | get_app_conf(application_id, 'docker.services.listmonk.name') }}"
+LISTMONK_CONFIG_HOST:         "{{ [ docker_compose.directories.config,'config.toml' ] | path_join }}"
 
 LISTMONK_PUBLIC_API_ENABLED:  "{{ applications | get_app_conf(application_id, 'public_api_activated') }}"
 

roles/web-app-mailu/tasks/01_core.yml

@@ -26,7 +26,7 @@
 - name: "Mailu Docker and Webserver Setup"
   block:
   - name: "load docker, db and proxy for {{ application_id }}"
-    include_role: 
+    include_role:
       name: sys-stk-full-stateful
     vars:
       docker_compose_flush_handlers: true

roles/web-app-mastodon/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "Include setup for domain '{{ domain }}'"
-  include_role: 
+  include_role:
     name: sys-stk-front-proxy
   loop: "{{ domains['web-app-mastodon'] }}"
   loop_control:
@@ -13,7 +13,7 @@
     vhost_flavour:        "ws_generic"
 
 - name: "load docker and db for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateful
   vars:
     docker_compose_flush_handlers: true

roles/web-app-matomo/tasks/01_core.yml

@@ -1,5 +1,5 @@
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 - name: "Patch Matomo config.ini.php"

roles/web-app-matrix/tasks/01_docker.yml

@@ -1,5 +1,5 @@
 - name: "load docker and db for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateful
   vars:
     docker_compose_flush_handlers: false

roles/web-app-matrix/tasks/03_webserver.yml

@@ -10,7 +10,7 @@
     dest: "{{ MATRIX_WELL_KNOWN_FILE }}"
         
 - name: "include role sys-stk-front-proxy for {{ MATRIX_ELEMENT_DOMAIN }}"
-  include_role: 
+  include_role:
     name: sys-stk-front-proxy
   vars:        
     domain:     "{{ MATRIX_ELEMENT_DOMAIN }}"

roles/web-app-matrix/vars/main.yml

@@ -28,9 +28,9 @@ MATRIX_SYNAPSE_NAME:                  "{{ applications | get_app_conf(applicatio
 MATRIX_SYNAPSE_VOLUME:                "{{ applications | get_app_conf(application_id, 'docker.volumes.synapse') }}"
 MATRIX_SYNAPSE_DOMAIN:                "{{ domains[application_id].synapse }}"
 MATRIX_SYNAPSE_PORT:                  "{{ ports.localhost.http['web-app-matrix_synapse'] }}"
-MATRIX_SYNAPSE_CONFIG_PATH_HOST:      "{{ docker_compose.directories.config }}homeserver.yaml"   
+MATRIX_SYNAPSE_CONFIG_PATH_HOST:      "{{ [ docker_compose.directories.config, 'homeserver.yaml' ] | path_join }}"
 MATRIX_SYNAPSE_CONFIG_PATH_CONTAINER: "/data/homeserver.yaml"
-MATRIX_SYNAPSE_LOG_PATH_HOST:         "{{ docker_compose.directories.config }}{{ MATRIX_SYNAPSE_DOMAIN }}.log.config"    
+MATRIX_SYNAPSE_LOG_PATH_HOST:         "{{ [ docker_compose.directories.config, MATRIX_SYNAPSE_DOMAIN ~'.log.config' ] | path_join }}"
 MATRIX_SYNAPSE_LOG_PATH_CONTAINER:    "/data/{{ MATRIX_SYNAPSE_DOMAIN }}.log.config"
 MATRIX_SYNAPSE_URL:                   "{{ WEB_PROTOCOL }}://{{ MATRIX_SYNAPSE_DOMAIN }}"
 
@@ -40,4 +40,4 @@ MATRIX_ELEMENT_IMAGE:                 "{{ applications | get_app_conf(applicatio
 MATRIX_ELEMENT_NAME:                  "{{ applications | get_app_conf(application_id, 'docker.services.element.name') }}"
 MATRIX_ELEMENT_DOMAIN:                "{{ domains[application_id].element }}"
 MATRIX_ELEMENT_PORT:                  "{{ ports.localhost.http['web-app-matrix_element'] }}"
-MATRIX_ELEMENT_CONFIG_PATH_HOST:      "{{ docker_compose.directories.config }}element-config.json"
+MATRIX_ELEMENT_CONFIG_PATH_HOST:      "{{ [ docker_compose.directories.config, 'element-config.json' ] | path_join }}"

roles/web-app-mediawiki/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for '{{ application_id }}'"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   vars:
     docker_compose_flush_handlers: false

roles/web-app-mobilizon/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 - name: add config.exs

roles/web-app-mobilizon/vars/main.yml

@@ -10,7 +10,7 @@ postgres_gis_enabled:           true
 docker_compose_flush_handlers:  false
 
 # Mobilizon
-mobilizon_host_conf_exs_file:   "{{ docker_compose.directories.config }}config.exs"
+mobilizon_host_conf_exs_file:   "{{ [ docker_compose.directories.config, 'config.exs' ] | path_join }}"
-mobilizon_version:              "{{ applications | get_app_conf(application_id, 'docker.services.mobilizon.version', True) }}"
+mobilizon_version:              "{{ applications | get_app_conf(application_id, 'docker.services.mobilizon.version') }}"
-mobilizon_image:                "{{ applications | get_app_conf(application_id, 'docker.services.mobilizon.image', True) }}"
+mobilizon_image:                "{{ applications | get_app_conf(application_id, 'docker.services.mobilizon.image') }}"
-mobilizon_container:            "{{ applications | get_app_conf(application_id, 'docker.services.mobilizon.name', True) }}"
+mobilizon_container:            "{{ applications | get_app_conf(application_id, 'docker.services.mobilizon.name') }}"

roles/web-app-moodle/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 - name: Check if config.php exists

roles/web-app-nextcloud/tasks/01_fullstack.yml

@@ -9,7 +9,7 @@
   notify: restart openresty
 
 - name: "load docker and db for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateful
   vars:
     docker_compose_flush_handlers: false

roles/web-app-nextcloud/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   vars:
 

roles/web-app-openproject/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 - name: "Create {{ openproject_plugins_folder }}"

roles/web-app-peertube/tasks/main.yml

@@ -10,7 +10,7 @@
     ws_port:    "{{ ports.localhost.http[application_id] }}"
 
 - name: "load docker and db for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateful
 
 - name: "Install and activate auth-openid-connect plugin if OIDC is enabled"

roles/web-app-pixelfed/tasks/main.yml

@@ -1,4 +1,4 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful

roles/web-app-pretix/tasks/main.yml

@@ -1,7 +1,7 @@
 ---
 - block:
   - name: "load docker, db and proxy for {{ application_id }}"
-    include_role: 
+    include_role:
       name: sys-stk-full-stateful
   - include_tasks: utils/run_once.yml
   when: run_once_web_app_pretix is not defined

roles/web-app-roulette-wheel/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "include docker-compose role"
-  include_role: 
+  include_role:
     name: docker-compose
 
 - name: pull app repository

roles/web-app-snipe-it/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 
 - name: "Configure Snipe-IT LDAP settings"

roles/web-app-syncope/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker and db for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateful
 
 - name: configure {{ domain }}.conf

roles/web-app-taiga/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   vars:
     docker_compose_flush_handlers: false

roles/web-app-wordpress/tasks/main.yml

@@ -10,7 +10,7 @@
     http_port: "{{ ports.localhost.http[application_id] }}"
 
 - name: "load docker and db for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-back-stateful
   vars:
     docker_compose_flush_handlers: false

roles/web-app-xwiki/tasks/01_core.yml

@@ -3,7 +3,7 @@
 
 - block:
     - name: "load docker, db and proxy for {{ application_id }}"
-      include_role: 
+      include_role:
         name: sys-stk-full-stateful
       vars:
         docker_compose_flush_handlers: false

roles/web-app-yourls/tasks/main.yml

@@ -1,5 +1,5 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
 

roles/web-opt-rdr-domains/tasks/redirect-domain.yml

@@ -1,5 +1,5 @@
 - name: "include task receive certbot certificate"
-  include_role: 
+  include_role:
     name: sys-svc-certs
 
 - name: "Deploying NGINX redirect configuration for '{{ domain }}'"

roles/web-svc-coturn/tasks/main.yml

@@ -1,4 +1,4 @@
 ---
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful

roles/web-svc-libretranslate/tasks/main.yml

@@ -1,5 +1,5 @@
 - name: "load docker, db and proxy for {{ application_id }}"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   when: run_once_web_app_libretranslate is not defined
 

roles/web-svc-simpleicons/vars/main.yml

@@ -1,4 +1,4 @@
 application_id:                 web-svc-simpleicons
 container_port:                 3000
-simpleicons_host_server_file:   "{{ docker_compose.directories.config }}server.js"
+simpleicons_host_server_file:   "{{ [ docker_compose.directories.config, 'server.js' ] | path_join }}"
-simpleicons_host_package_file:  "{{ docker_compose.directories.config }}package.json"
+simpleicons_host_package_file:  "{{ [ docker_compose.directories.config, 'package.json' ] | path_join }}"

templates/roles/web-app/tasks/main.yml.j2

@@ -3,14 +3,14 @@
 {% raw %}
 # Default: Loading; Docker, Database and Reverse Proxy
 - name: "load docker, db and proxy for '{{ application_id }}'"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   when: run_once_docker_{% endraw %}{{ application_id | replace("_", "-") }}{% raw %} is not defined
 {% endraw %}
 {% else %}
 {% raw %}
 - name: "load docker, proxy for '{{ application_id }}'"
-  include_role: 
+  include_role:
     name: sys-stk-full-stateful
   when: run_once_docker_{% endraw %}{{ application_id | replace("_", "-") }}{% raw %} is not defined
 {% endraw %}