2 Commits

Include renames

Author	SHA1	Message	Date
kevinveenbirkenbachandClaude Opus 5.5	4a56b4c19c	fix(web-app-matrix): declare Element's forced device verification per variant ... Element v1.12.33 (automated bump a8fba45d60, on main) ships element-web #35364, which turns force_verification on by default. From the second OIDC login of an account on, Element stops on "Confirm your digital identity" with no skip button, so the Matrix SSO specs that log the same account in twice (test-dm-admin-biber.js, test-design.js) never reach the signed-in UI: "administrator: authenticated Element UI (user menu / room list / welcome) must render" fails after 120 s (fork run 40625679270, Matrix#2 and the co-deployed Moodle#2). services.element.force_verification now carries the platform default, true as upstream, and both flavors render it (the compose element config and the MDAD element configuration extension). Only variants 0 and 2, the SSO rounds, set it to false. Production keeps forced verification. Cherry-picked from e042c9dbf9 on feature/store-i18n. main has no Element branding block yet, so the MDAD flavor carries only the force_verification key in its configuration extension. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-28 19:33:36 +01:00
kevinveenbirkenbachandClaude Opus 4.7	70c1a03f13	feat(web-app-matrix): add ansible flavor via unified compose.yml.j2 ... Implements requirement 025 (docs/requirements/025-web-app-matrix-ansible-flavor.md). Architecture: - services.matrix.flavor: ansible | compose - Single templates/compose.yml.j2 branches on matrix_flavor - ansible flavor: defines matrix-mdad-runner one-shot compose service that DiD-executes upstream matrix-docker-ansible-deploy (pinned ref + migration validated version). MDAD writes /etc/systemd/system/matrix-*.service units on the host; post-up Ansible task container-waits the runner, then probes loopback ports + wires sys-stk-front-proxy. - compose flavor: legacy in-repo stack (synapse/element/coturn/bridges) kept for regression coverage, marked deprecated. Variant-switch ansible -> compose: - 00_cleanup_mdad_residue.yml tears down MDAD-installed systemd units + leftover matrix-* containers before compose-flavor brings up its own matrix-synapse (else: name conflict, compose down doesn't touch systemd-managed state). Reorganization: - roles/web-app-matrix/{tasks,templates,files}/flavor/{ansible,compose}/ - Renamed legacy compose-flavor task files into flavor/compose/ - New runner Dockerfile (multi-stage, ARG-parameterized FROM via build-args) Verified: 3 variants x 2 passes (sync+async) full_cycle green, all 6 PLAY RECAPs failed=0. V1 (ansible all-on), V2 (ansible no-auth), V3 (compose deprecated all-on). Playwright matrix tests pass per variant. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-06-05 10:21:41 +02:00