Replaced nginx native with openresty for logout injection. Right now still buggy on nextcloud and espocrm

This commit is contained in:
2025-07-24 03:19:16 +02:00
parent f5213fd59c
commit f62355e490
129 changed files with 515 additions and 319 deletions

View File

@@ -59,7 +59,7 @@ features:
ldap: true
oidc: true
central_database: true
universal_logout: true
logout: true
default_quota: '1000000000' # Quota to assign if no quota is specified in the OIDC response (bytes)
legacy_login_mask:
enabled: False # If true, then legacy login mask is shown. Otherwise just SSO

View File

@@ -23,11 +23,11 @@
include_role:
name: srv-web-7-6-composer
- name: create nextcloud nginx proxy configuration file
- name: create nextcloud proxy configuration file
template:
src: "nginx/host.conf.j2"
dest: "{{nginx.directories.http.servers}}{{domains | get_domain(application_id)}}.conf"
notify: restart nginx
notify: restart openresty
- name: create internal nextcloud nginx configuration
template:

View File

@@ -6,7 +6,7 @@ server
{% include 'roles/srv-web-7-7-letsencrypt/templates/ssl_header.j2' %}
{% include 'roles/srv-web-7-7-inj-compose/templates/global.includes.conf.j2'%}
{% include 'roles/srv-web-7-7-inj-compose/templates/global.includes.lua.j2'%}
# Remove X-Powered-By, which is an information leak
fastcgi_hide_header X-Powered-By;
@@ -20,7 +20,7 @@ server
{% include 'roles/srv-proxy-7-4-core/templates/location/proxy_basic.conf.j2' %}
{% if applications | get_app_conf(application_id, 'features.universal_logout', False) %}
{% if applications | get_app_conf(application_id, 'features.logout', False) %}
{% include 'roles/web-svc-logout/templates/logout-proxy.conf.j2' %}
{% endif %}