kevinveenbirkenbach
4f8ce598a9
Mastodon: allow internal chess host & refactor var names; OpenLDAP: safer get_app_conf
...
- Add ALLOWED_PRIVATE_ADDRESSES to .env (from svc-db-postgres) to handle 422 Mastodon::PrivateNetworkAddressError
- Switch docker-compose to MASTODON_* variables and align vars/main.yml
- Always run 01_setup.yml during deployment (removed conditional flag)
- OpenLDAP: remove implicit True default on network.local to avoid unintended truthy behavior
Context: chess.infinito.nexus resolved to 192.168.200.30 (private IP) from Mastodon; targeted allowlist unblocks federation lookups.
Ref: https://chat.openai.com/share/REPLACE_WITH_THIS_CONVERSATION_LINK
2025-09-03 21:44:47 +02:00
kevinveenbirkenbach
009bee531b
Refactor role naming for TLS and proxy stack
...
- Renamed role `srv-tls-core` → `sys-svc-certs`
- Renamed role `srv-https-stack` → `sys-stk-front-pure`
- Renamed role `sys-stk-front` → `sys-stk-front-proxy`
- Updated all includes, READMEs, meta, and dependent roles accordingly
This improves clarity and consistency of naming conventions for certificate management and proxy orchestration.
See: https://chatgpt.com/share/68b19f2c-22b0-800f-ba9b-3f2c8fd427b0
2025-08-29 14:38:20 +02:00
kevinveenbirkenbach
6ea8301364
Refactor: migrate cmp/* and srv/* roles into sys-stk/* and sys-svc/* namespaces
...
- Removed obsolete 'cmp' category, introduced 'stk' category (fa-bars-staggered icon).
- Renamed roles:
* cmp-db-docker → sys-stk-back-stateful
* cmp-docker-oauth2 → sys-stk-back-stateless
* srv-domain-provision → sys-stk-front
* cmp-db-docker-proxy → sys-stk-full-stateful
* cmp-docker-proxy → sys-stk-full-stateless
* cmp-rdbms → sys-svc-rdbms
- Updated all include_role references, vars, templates and README.md files.
- Adjusted run_once comments and variable paths accordingly.
- Updated all web-app roles to use new sys-stk/* and sys-svc/* roles.
Conversation: https://chatgpt.com/share/68b0ba66-09f8-800f-86fc-76c47009d431
2025-08-28 22:23:09 +02:00
kevinveenbirkenbach
a4f39ac732
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
kevinveenbirkenbach
f0b323afee
Added auto snippet for webserver injection
2025-08-16 01:31:49 +02:00
kevinveenbirkenbach
022800425d
THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs
2025-08-15 15:15:48 +02:00
kevinveenbirkenbach
004507e233
Optimized handler flushing
2025-08-13 18:17:05 +02:00
kevinveenbirkenbach
27973c2773
Optimized injection layer on lua base, as replace for nginx replace. Also optimized cloudflare cache deletion(no everytime for cleanup). Still CDN is required for logout mechanism via JS and Nextcloud deploy is buggy after changing from nginx to openresty. Propably some variable overwritte topic. Should be solved tomorrow.
2025-07-24 19:13:13 +02:00
kevinveenbirkenbach
d1982af63d
Optimized mastodon and network integration. added options for mig build to make
2025-07-17 18:50:28 +02:00
kevinveenbirkenbach
fd8ef26b53
Solved streaming bugs
2025-07-17 09:47:08 +02:00
kevinveenbirkenbach
af3ea9039c
Restructure and cleaned up in preparation of new backup logic
2025-07-15 23:51:51 +02:00
kevinveenbirkenbach
96268e7161
Renamed server roles by osi they work on
2025-07-10 12:33:46 +02:00
kevinveenbirkenbach
c9c73cbdb2
Decoupeld database, docker and proxy
2025-07-09 14:21:30 +02:00
kevinveenbirkenbach
575df76ec3
Shortened service- to svc-
2025-07-09 05:00:41 +02:00
kevinveenbirkenbach
66198ca1ec
Shortened webserver to srv-web-
2025-07-09 04:27:58 +02:00
kevinveenbirkenbach
563d5fd528
Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation
2025-07-08 23:43:13 +02:00
kevinveenbirkenbach