e6803e5614 
					 
					
						
						
							
							refactor(ansible): normalize include_role syntax and unify host config paths via path_join  
						
						... 
						
						
						
						- Remove stray spaces after include_role: across many roles to ensure clean YAML and
  consistent linting/formatting.
- Listmonk:
  - Introduce LISTMONK_CONFIG_HOST = [ docker_compose.directories.config, 'config.toml' ] | path_join
  - Use that var in the template task (dest) and the docker-compose volume mount
- Matrix:
  - Build MATRIX_SYNAPSE_CONFIG_PATH_HOST, MATRIX_SYNAPSE_LOG_PATH_HOST, and
    MATRIX_ELEMENT_CONFIG_PATH_HOST via path_join
- Mobilizon:
  - Build mobilizon_host_conf_exs_file via path_join
  - Keep get_app_conf strictness unchanged (defaults to True in our filter), so behavior
    remains strict even though the explicit third arg was dropped
- Simpleicons:
  - Build server.js and package.json host paths via path_join
- Numerous web-app roles (Confluence, Discourse, EspoCRM, Friendica, Funkwhale, Gitea,
  GitLab, Jenkins, Joomla, Listmonk, Mailu, Mastodon, Matomo, Matrix, MediaWiki,
  Mobilizon, Moodle, Nextcloud, OpenProject, Peertube, Pixelfed, Pretix, Roulette Wheel,
  Snipe-IT, Syncope, Taiga, WordPress, XWiki, Yourls) and web-svc roles (coturn,
  libretranslate, simpleicons) updated for consistent include_role formatting
Why:
- path_join avoids double slashes and missing separators across different config roots
- Consistent include_role: formatting improves readability and prevents linter noise
Ref:
- Conversation: https://chatgpt.com/share/68d14711-727c-800f-b454-7dc4c3c1f4cb  
						
						
					 
					
						2025-09-22 14:55:25 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						d523629cdd 
					 
					
						
						
							
							Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See:  https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1  
						
						
						
						
					 
					
						2025-09-20 09:31:49 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a4a8061998 
					 
					
						
						
							
							Refactor: unify Docker build config via build.yml.j2 include  
						
						... 
						
						
						
						Replaced duplicated inline build definitions in multiple docker-compose.yml.j2
templates with a shared include (roles/docker-container/templates/build.yml.j2).
This ensures consistent use of pull_policy: never and Dockerfile context across
services (Postgres, Bookwyrm, Bridgy Fed, Chess, Confluence, Jira, Moodle,
OpenProject, Pretix, Roulette Wheel, WordPress, XWiki, Simpleicons).
Conversation: https://chatgpt.com/share/68cd8f35-b764-800f-9b00-2c837103d2fb  
						
						
					 
					
						2025-09-19 19:13:44 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5e616d3962 
					 
					
						
						
							
							web: general domain cleanup (canonical/aliases normalization)  
						
						... 
						
						
						
						- Normalize domain blocks across apps:
  - Add explicit 'aliases: []' everywhere (no implicit aliases)
  - Standardize canonical subdomains for consistency:
    * Bluesky: web/api under *.bluesky.<PRIMARY_DOMAIN>
    * EspoCRM: espo.crm.<PRIMARY_DOMAIN>
    * Gitea:   tea.git.<PRIMARY_DOMAIN>
    * GitLab:  lab.git.<PRIMARY_DOMAIN>
    * Joomla:  joomla.cms.<PRIMARY_DOMAIN>
    * Magento: magento.shop.<PRIMARY_DOMAIN>
    * OpenProject: open.project.<PRIMARY_DOMAIN>
    * Pretix:  ticket.shop.<PRIMARY_DOMAIN>
    * Taiga:   kanban.project.<PRIMARY_DOMAIN>
  - Remove legacy/duplicate aliases and use empty list instead
  - Fix 'alias' -> 'aliases' where applicable
Context: preparing for AUTO_BUILD_ALIASES=False and deterministic redirect mapping.
Ref: conversation https://chatgpt.com/share/68cd512c-c878-800f-bdf2-81737adf7e0e  
						
						
					 
					
						2025-09-19 14:51:56 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						9feb766e6f 
					 
					
						
						
							
							replaced style-src-elem by style-src  
						
						
						
						
					 
					
						2025-09-01 10:14:03 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b3dfb8bf22 
					 
					
						
						
							
							Fix: Resolved Discourse plugin bug and unified variable/path handling  
						
						... 
						
						
						
						- Discourse: fixed 'DISCOURSE_CONTAINERS_DIR' and 'DISCOURSE_APPLICATION_YML_DEST'
- Nextcloud: improved plugin enable/configure tasks formatting
- WordPress: unified OIDC, msmtp, and upload.ini variables and tasks
- General: aligned spacing and switched to path_join for consistency 
						
						
					 
					
						2025-08-29 20:53:36 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						db642c1c39 
					 
					
						
						
							
							refactor(schedule): unify service timeouts, rename 08_timer.yml → 08_schedule.yml, fix docker repair/update timeouts, raise WP upload limit  
						
						... 
						
						
						
						See https://chatgpt.com/share/68b1deb9-2534-800f-b28f-7f19925b1fa7  
						
						
					 
					
						2025-08-29 19:09:28 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						009bee531b 
					 
					
						
						
							
							Refactor role naming for TLS and proxy stack  
						
						... 
						
						
						
						- Renamed role `srv-tls-core` → `sys-svc-certs`
- Renamed role `srv-https-stack` → `sys-stk-front-pure`
- Renamed role `sys-stk-front` → `sys-stk-front-proxy`
- Updated all includes, READMEs, meta, and dependent roles accordingly
This improves clarity and consistency of naming conventions for certificate management and proxy orchestration.
See: https://chatgpt.com/share/68b19f2c-22b0-800f-ba9b-3f2c8fd427b0  
						
						
					 
					
						2025-08-29 14:38:20 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6ea8301364 
					 
					
						
						
							
							Refactor: migrate cmp/* and srv/* roles into sys-stk/* and sys-svc/* namespaces  
						
						... 
						
						
						
						- Removed obsolete 'cmp' category, introduced 'stk' category (fa-bars-staggered icon).
- Renamed roles:
  * cmp-db-docker → sys-stk-back-stateful
  * cmp-docker-oauth2 → sys-stk-back-stateless
  * srv-domain-provision → sys-stk-front
  * cmp-db-docker-proxy → sys-stk-full-stateful
  * cmp-docker-proxy → sys-stk-full-stateless
  * cmp-rdbms → sys-svc-rdbms
- Updated all include_role references, vars, templates and README.md files.
- Adjusted run_once comments and variable paths accordingly.
- Updated all web-app roles to use new sys-stk/* and sys-svc/* roles.
Conversation: https://chatgpt.com/share/68b0ba66-09f8-800f-86fc-76c47009d431  
						
						
					 
					
						2025-08-28 22:23:09 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						dece6228a4 
					 
					
						
						
							
							Refactor docker-compose build logic and pull policy  
						
						... 
						
						
						
						- Added conditional '--pull' flag on retry in docker-compose build handler, tied to MODE_UPDATE
- Added 'pull_policy: never' to multiple docker-compose service templates to prevent unwanted image pulls
- Fixed minor formatting issues (e.g. Nextcloud volume spacing, WordPress desktop alignment)
Reference: https://chatgpt.com/share/68b0207a-4d9c-800f-b76f-9515885e5183  
						
						
					 
					
						2025-08-28 11:25:35 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						de159db918 
					 
					
						
						
							
							web-app-wordpress: move msmtp configuration from Docker image to docker-compose mount  
						
						... 
						
						
						
						- Removed COPY of msmtp configuration from Dockerfile to avoid baking secrets/config into the image
- Added volume mount for host-side msmtp config ({{ WORDPRESS_HOST_MSMTP_CONF }}) in docker-compose.yml
- Keeps PHP upload.ini handling inside the image, but externalizes sensitive mail configuration
- Increases flexibility and avoids rebuilds when msmtp config changes
Ref: https://chatgpt.com/share/68af3c51-0544-800f-b76f-b2660c43addb  
						
						
					 
					
						2025-08-27 19:12:03 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						73e7fbdc8a 
					 
					
						
						
							
							refactor(web-app-wordpress): unify variable naming to uppercase WORDPRESS_* style  
						
						... 
						
						
						
						- Replaced all lowercase wordpress_* variables with uppercase WORDPRESS_* equivalents
- Ensured consistency across tasks, templates, and vars
- Improves readability and aligns with naming conventions
Conversation: https://chatgpt.com/share/68af29b5-8e7c-800f-bd12-48cc5956311c  
						
						
					 
					
						2025-08-27 17:52:38 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c182ecf516 
					 
					
						
						
							
							Refactor and cleanup OIDC, desktop, and web-app roles  
						
						... 
						
						
						
						- Improved OIDC variable definitions (12_oidc.yml)
- Added account/security/profile URLs
- Restructured web-app-desktop tasks and JS handling
- Introduced oidc.js and iframe.js with runtime loader
- Fixed nginx.conf, LDAP, and healthcheck templates spacing
- Improved Lua injection for CSP and snippets
- Fixed typos (WordPress, receive, etc.)
- Added silent-check-sso nginx location
Conversation: https://chatgpt.com/share/68ae0060-4fac-800f-9f02-22592a4087d3  
						
						
					 
					
						2025-08-26 20:44:05 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a4f39ac732 
					 
					
						
						
							
							Renamed webserver roles to more speakable names  
						
						
						
						
					 
					
						2025-08-20 08:54:17 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						79517b2fe9 
					 
					
						
						
							
							Optimized spacing  
						
						
						
						
					 
					
						2025-08-20 01:01:32 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5c9ca20e04 
					 
					
						
						
							
							Optimized keycloak variables  
						
						
						
						
					 
					
						2025-08-17 11:40:15 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0de26fa6c7 
					 
					
						
						
							
							Solved bug existed due to difference between mailu domain and hostname difference. also refactored during this to find the bug  
						
						
						
						
					 
					
						2025-08-16 14:29:07 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5b64b47754 
					 
					
						
						
							
							Added no_log  
						
						
						
						
					 
					
						2025-08-15 23:18:44 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						03564b34bb 
					 
					
						
						
							
							Optimized reset routine for docker images and specially discourse  
						
						
						
						
					 
					
						2025-08-15 21:35:45 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3ac9bd9f90 
					 
					
						
						
							
							Optimized variable typos  
						
						
						
						
					 
					
						2025-08-15 18:43:42 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						022800425d 
					 
					
						
						
							
							THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs  
						
						
						
						
					 
					
						2025-08-15 15:15:48 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0228014d34 
					 
					
						
						
							
							Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf  
						
						
						
						
					 
					
						2025-08-14 14:39:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4a65a254ae 
					 
					
						
						
							
							replaced port-ui-desktop with desktop to make it more speakable  
						
						
						
						
					 
					
						2025-08-14 11:45:08 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						db0e030900 
					 
					
						
						
							
							Renamed general and mode constants and implemented a check to verify that constants are just defined ones over the whole repository  
						
						
						
						
					 
					
						2025-08-13 19:11:14 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						004507e233 
					 
					
						
						
							
							Optimized handler flushing  
						
						
						
						
					 
					
						2025-08-13 18:17:05 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e99fa77b91 
					 
					
						
						
							
							Optimized docker handlers for espocrm and wordpress  
						
						
						
						
					 
					
						2025-08-13 13:34:12 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f31565e4c5 
					 
					
						
						
							
							Optimized URLS  
						
						
						
						
					 
					
						2025-08-13 00:33:47 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c744ebe3f9 
					 
					
						
						
							
							feat(web-app-wordpress): add idempotent single-site domain update via WP-CLI  
						
						... 
						
						
						
						- New task 04_update_domain.yml updates home/siteurl only when needed
- DB-wide search-replace (old → new), GUID-safe, precise, tables-with-prefix
- Normalizes http→https, strips trailing slashes, then flushes cache/rewrites
- Guarded by is_multisite()==0; multisite untouched
- Wired into main.yml with auto target URL via domains|get_url
Fixes post-domain-change mixed/CSP issues due to hard-coded old URLs.
https://chatgpt.com/share/689bac2d-3610-800f-b6f0-41dc79d13a14  
						
						
					 
					
						2025-08-12 23:03:59 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						de15c42de8 
					 
					
						
						
							
							Added database patch to wordpress  
						
						
						
						
					 
					
						2025-08-11 21:46:29 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f6e62525d1 
					 
					
						
						
							
							Optimized wordpress variables  
						
						
						
						
					 
					
						2025-08-11 20:00:48 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7f53cc3a12 
					 
					
						
						
							
							Replaced web_protocol by WEB_PROTOCOL  
						
						
						
						
					 
					
						2025-08-07 12:31:20 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						9228d51e86 
					 
					
						
						
							
							Restructured server config  
						
						
						
						
					 
					
						2025-08-07 11:31:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						44e0fea0b2 
					 
					
						
						
							
							Renamed cymais to infinito and did some other optimations and logout implementations  
						
						
						
						
					 
					
						2025-07-29 16:35:42 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a9e7ed3605 
					 
					
						
						
							
							Implemented flexible upload limits for wordpress and matrix :)  
						
						
						
						
					 
					
						2025-07-26 11:22:01 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f62355e490 
					 
					
						
						
							
							Replaced nginx native with openresty for logout injection. Right now still buggy on nextcloud and espocrm  
						
						
						
						
					 
					
						2025-07-24 03:19:16 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4b9e7dd3b7 
					 
					
						
						
							
							Implemented universal logout  
						
						
						
						
					 
					
						2025-07-22 13:14:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ad449c3b6a 
					 
					
						
						
							
							Adapted roles to new architecture  
						
						
						
						
					 
					
						2025-07-17 15:39:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						169493179e 
					 
					
						
						
							
							Restructuring for new backup solution  
						
						
						
						
					 
					
						2025-07-16 19:09:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f9426cfb74 
					 
					
						
						
							
							Optimized role structure in preparation for new backup script  
						
						
						
						
					 
					
						2025-07-16 12:31:01 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						af3ea9039c 
					 
					
						
						
							
							Restructure and cleaned up in preparation of new backup logic  
						
						
						
						
					 
					
						2025-07-15 23:51:51 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						756597668c 
					 
					
						
						
							
							Semi bsr for applications[] to prevent heavy to debug bugs in j2 - part 1  
						
						
						
						
					 
					
						2025-07-13 15:11:38 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						78031855b9 
					 
					
						
						
							
							Replaced portfolio_iframe by port-ui-desktop  
						
						
						
						
					 
					
						2025-07-13 14:22:36 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						25e4a50974 
					 
					
						
						
							
							Cleaning up of gen roles  
						
						
						
						
					 
					
						2025-07-11 19:19:24 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						168c5c0da6 
					 
					
						
						
							
							Another big round of refactoring and cleaning...  
						
						
						
						
					 
					
						2025-07-11 17:55:26 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						96268e7161 
					 
					
						
						
							
							Renamed server roles by osi they work on  
						
						
						
						
					 
					
						2025-07-10 12:33:46 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7a38241485 
					 
					
						
						
							
							Made code more modular and refactored to cmp roles  
						
						
						
						
					 
					
						2025-07-09 20:15:32 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c9c73cbdb2 
					 
					
						
						
							
							Decoupeld database, docker and proxy  
						
						
						
						
					 
					
						2025-07-09 14:21:30 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						575df76ec3 
					 
					
						
						
							
							Shortened service- to svc-  
						
						
						
						
					 
					
						2025-07-09 05:00:41 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						66198ca1ec 
					 
					
						
						
							
							Shortened webserver to srv-web-  
						
						
						
						
					 
					
						2025-07-09 04:27:58 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						94bb060a5b 
					 
					
						
						
							
							Shorted generic- to gen-  
						
						
						
						
					 
					
						2025-07-09 03:55:24 +02:00