3 Commits

Author	SHA1	Message	Date
Kevin Veen-Birkenbach	0bf286f62a	Enhance Shopware role: fix init script permissions, CSP for data: fonts, and unify shell usage ... - Added 'font-src data:' to CSP whitelist to allow inline fonts in Admin UI - Refactored init.sh to run as root only for volume permission setup, then drop privileges to www-data - Unified all bash invocations to sh for POSIX compliance - Added missing 'bundles' named volume and mount to Docker Compose - Set init container to run as root (0:0) for permission setup - Added admin user rename step via Ansible task See discussion: https://chatgpt.com/share/69087361-859c-800f-862c-7413350cca3e	2025-11-03 10:18:45 +01:00
Kevin Veen-Birkenbach	f5efbce205	feat(shopware): migrate to single Shopware base image and split services (web/worker/scheduler/init) ... • Introduce init container and runtime-ready Dockerfile (Alpine) installing php83-gd/intl/pdo_mysql • Disable composer scripts in builder and ignore build-time ext reqs • New docker-compose template (web/worker/scheduler/opensearch) + persistent volumes • Use TRUSTED_PROXIES env; fix APP_URL formatting; set OPENSEARCH_HOST=opensearch • Replace SHOPWARE_PHP_CONTAINER refs with SHOPWARE_WEB_CONTAINER in tasks • Render and copy init.sh via volumes path • Remove old nginx/php split and legacy DB env task • Fix svc-db-postgres var: database_type now uses entity_name https://chatgpt.com/share/6907fc58-7c28-800f-a993-c207f28859c9	2025-11-03 01:51:38 +01:00
Kevin Veen-Birkenbach	d1ccfd9cdd	Add new Shopware 6 role with OIDC/LDAP plugin integration and Docker-based deployment configuration. ... Includes: - New role: web-app-shopware (Docker, MariaDB, Redis, OpenSearch) - Updated networks and ports configuration - Automated install, migration, and admin creation - Optional IAM integration via OIDC/LDAP plugins Reference: https://chatgpt.com/share/6907b0d4-ab14-800f-b576-62c0d26c8ad1	2025-11-02 20:29:13 +01:00