kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-08-29 15:06:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

Optimized CSP rules

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach
2025-06-03 14:32:15 +02:00
parent cc9b634bb8
commit ebd74db3c4
27 changed files with 57 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/docker-bigbluebutton/vars/configuration.yml
View File

@@ -17,7 +17,7 @@ domains:
- "meet.{{ primary_domain }}"
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
style-src:
unsafe-inline: true

2
roles/docker-discourse/vars/configuration.yml
View File

@@ -12,7 +12,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-inline: true
whitelist:
font-src:

2
roles/docker-espocrm/vars/configuration.yml
View File

@@ -15,7 +15,7 @@ features:
central_database: true
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:

2
roles/docker-gitea/vars/configuration.yml
View File

@@ -12,7 +12,7 @@ features:
central_database: true
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
style-src:
unsafe-inline: true

2
roles/docker-keycloak/vars/configuration.yml
View File

@@ -14,7 +14,7 @@ features:
recaptcha: true
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
style-src:
unsafe-inline: true

2
roles/docker-lam/vars/configuration.yml
View File

@@ -15,7 +15,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
domains:

2
roles/docker-listmonk/vars/configuration.yml
View File

@@ -7,7 +7,7 @@ public_api_activated: False # Security hol
version: "latest" # Docker Image version
features:
matomo: true
css: true
css: false
portfolio_iframe: true
central_database: true
oidc: true

11
roles/docker-mailu/vars/configuration.yml
View File

@@ -16,8 +16,9 @@ features:
domains:
canonical:
- "mail.{{ primary_domain }}"
flags:
style-src:
unsafe-inline: true
script-src:
unsafe-inline: true
csp:
flags:
style-src:
unsafe-inline: true
script-src-elem:
unsafe-inline: true

4
roles/docker-matomo/vars/configuration.yml
View File

@@ -8,12 +8,12 @@ features:
oauth2: false
csp:
whitelist:
script-src:
script-src-elem:
- https://cdn.matomo.cloud
style-src:
- https://fonts.googleapis.com
flags:
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:

4
roles/docker-matrix/vars/configuration.yml
View File

@@ -20,7 +20,7 @@ features:
central_database: true
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:
@@ -29,7 +29,7 @@ csp:
connect-src:
- "{{ primary_domain }}"
- "matrix.{{ primary_domain }}"
script-src:
script-src-elem:
- "element.{{ primary_domain }}"
- "https://cdn.jsdelivr.net"
plugins:

4
roles/docker-moodle/vars/configuration.yml
View File

@@ -12,7 +12,7 @@ features:
oidc: false
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:
@@ -21,7 +21,7 @@ csp:
font-src:
- "data:"
- "blob:"
script-src:
script-src-elem:
- "https://cdn.jsdelivr.net"
domains:
canonical:

13
roles/docker-nextcloud/Update.md Normal file
View File

@@ -0,0 +1,13 @@
# Update Nextcloud (manuel)
To perform a manuel Nexcloud update execute:
```bash
docker-compose exec -T -u www-data application /var/www/html/occ upgrade
docker-compose exec -T -u www-data application /var/www/html/occ maintenance:repair --include-expensive
docker-compose exec -T -u www-data application /var/www/html/occ app:update --all
docker-compose exec -T -u www-data application /var/www/html/occ db:add-missing-columns
docker-compose exec -T -u www-data application /var/www/html/occ db:add-missing-indices
docker-compose exec -T -u www-data application /var/www/html/occ db:add-missing-primary-keys
docker-compose exec -T -u www-data application /var/www/html/occ maintenance:mode --off
```

2
roles/docker-nextcloud/vars/configuration.yml
View File

@@ -3,7 +3,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-inline: true
whitelist:
font-src:

2
roles/docker-openproject/vars/configuration.yml
View File

@@ -15,7 +15,7 @@ features:
oauth2: true
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
style-src:
unsafe-inline: true

2
roles/docker-peertube/vars/configuration.yml
View File

@@ -7,7 +7,7 @@ features:
oidc: true
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
style-src:
unsafe-inline: true

2
roles/docker-pgadmin/vars/configuration.yml
View File

@@ -17,7 +17,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-inline: true
whitelist:
font-src:

2
roles/docker-phpmyadmin/vars/configuration.yml
View File

@@ -14,7 +14,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-inline: true
domains:
aliases:

2
roles/docker-pixelfed/vars/configuration.yml
View File

@@ -7,7 +7,7 @@ features:
central_database: true
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:

4
roles/docker-portfolio/vars/configuration.yml
View File

@@ -4,7 +4,7 @@ features:
portfolio_iframe: false
csp:
whitelist:
script-src:
script-src-elem:
- https://cdn.jsdelivr.net
- https://kit.fontawesome.com
style-src:
@@ -19,7 +19,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-inline: true
domains:
canonical:

4
roles/docker-presentation/vars/configuration.yml
View File

@@ -5,7 +5,7 @@ features:
csp:
whitelist:
script-src:
script-src-elem:
- https://cdnjs.cloudflare.com
- https://code.jquery.com
- https://cdn.jsdelivr.net
@@ -17,7 +17,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-eval: true
domains:
canonical:

2
roles/docker-snipe-it/vars/configuration.yml
View File

@@ -9,7 +9,7 @@ domains:
- "inventory.{{ primary_domain }}"
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
style-src:
unsafe-inline: true

2
roles/docker-sphinx/vars/configuration.yml
View File

@@ -4,7 +4,7 @@ features:
portfolio_iframe: false
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:

2
roles/docker-taiga/vars/configuration.yml
View File

@@ -15,7 +15,7 @@ features:
csp:
flags:
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:

4
roles/docker-wordpress/vars/configuration.yml
View File

@@ -20,7 +20,7 @@ csp:
flags:
style-src:
unsafe-inline: true
script-src:
script-src-elem:
unsafe-inline: true
unsafe-eval: true
whitelist:
@@ -29,7 +29,7 @@ csp:
font-src:
- "data:"
- "https://fonts.bunny.net"
script-src:
script-src-elem:
- "https://cdn.gtranslate.net"
- "blog.{{ primary_domain }}"
style-src: