fa6bb67a66 
					 
					
						
						
							
							Removed whitespaces in templates:  
						
						
						
						
					 
					
						2025-09-22 16:28:57 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e6803e5614 
					 
					
						
						
							
							refactor(ansible): normalize include_role syntax and unify host config paths via path_join  
						
						... 
						
						
						
						- Remove stray spaces after include_role: across many roles to ensure clean YAML and
  consistent linting/formatting.
- Listmonk:
  - Introduce LISTMONK_CONFIG_HOST = [ docker_compose.directories.config, 'config.toml' ] | path_join
  - Use that var in the template task (dest) and the docker-compose volume mount
- Matrix:
  - Build MATRIX_SYNAPSE_CONFIG_PATH_HOST, MATRIX_SYNAPSE_LOG_PATH_HOST, and
    MATRIX_ELEMENT_CONFIG_PATH_HOST via path_join
- Mobilizon:
  - Build mobilizon_host_conf_exs_file via path_join
  - Keep get_app_conf strictness unchanged (defaults to True in our filter), so behavior
    remains strict even though the explicit third arg was dropped
- Simpleicons:
  - Build server.js and package.json host paths via path_join
- Numerous web-app roles (Confluence, Discourse, EspoCRM, Friendica, Funkwhale, Gitea,
  GitLab, Jenkins, Joomla, Listmonk, Mailu, Mastodon, Matomo, Matrix, MediaWiki,
  Mobilizon, Moodle, Nextcloud, OpenProject, Peertube, Pixelfed, Pretix, Roulette Wheel,
  Snipe-IT, Syncope, Taiga, WordPress, XWiki, Yourls) and web-svc roles (coturn,
  libretranslate, simpleicons) updated for consistent include_role formatting
Why:
- path_join avoids double slashes and missing separators across different config roots
- Consistent include_role: formatting improves readability and prevents linter noise
Ref:
- Conversation: https://chatgpt.com/share/68d14711-727c-800f-b454-7dc4c3c1f4cb  
						
						
					 
					
						2025-09-22 14:55:25 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5e616d3962 
					 
					
						
						
							
							web: general domain cleanup (canonical/aliases normalization)  
						
						... 
						
						
						
						- Normalize domain blocks across apps:
  - Add explicit 'aliases: []' everywhere (no implicit aliases)
  - Standardize canonical subdomains for consistency:
    * Bluesky: web/api under *.bluesky.<PRIMARY_DOMAIN>
    * EspoCRM: espo.crm.<PRIMARY_DOMAIN>
    * Gitea:   tea.git.<PRIMARY_DOMAIN>
    * GitLab:  lab.git.<PRIMARY_DOMAIN>
    * Joomla:  joomla.cms.<PRIMARY_DOMAIN>
    * Magento: magento.shop.<PRIMARY_DOMAIN>
    * OpenProject: open.project.<PRIMARY_DOMAIN>
    * Pretix:  ticket.shop.<PRIMARY_DOMAIN>
    * Taiga:   kanban.project.<PRIMARY_DOMAIN>
  - Remove legacy/duplicate aliases and use empty list instead
  - Fix 'alias' -> 'aliases' where applicable
Context: preparing for AUTO_BUILD_ALIASES=False and deterministic redirect mapping.
Ref: conversation https://chatgpt.com/share/68cd512c-c878-800f-bdf2-81737adf7e0e  
						
						
					 
					
						2025-09-19 14:51:56 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						231fd567b3 
					 
					
						
						
							
							feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup  
						
						... 
						
						
						
						Introduce sys-svc-cdn (cdn_paths/cdn_urls/cdn_dirs) and ensure CDN directories + latest symlink.
Rename sys-srv-web-inj-* → sys-front-inj-*; update includes/templates; serve shared/per-app CSS & JS via CDN.
Add lookup_plugins/local_mtime_qs.py for mtime-based cache busting; split CSS into default.css/bootstrap.css + optional per-app style.css.
CSP: use style-src-elem; drop unsafe-inline for styles. Services: fix SYS_SERVICE_ALL_ENABLED bool and controlled flush.
BREAKING CHANGE: role names changed; replace includes and references accordingly.
Conversation: https://chatgpt.com/share/68b55494-9ec4-800f-b559-44707029141d  
						
						
					 
					
						2025-09-01 10:10:23 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5f66c1a622 
					 
					
						
						
							
							feat(postgres): add split_postgres_connections filter and average pool fact  
						
						... 
						
						
						
						Compute POSTGRES_ALLOWED_AVG_CONNECTIONS once and propagate to app roles (gitlab, mastodon, listmonk, matrix, pretix, mobilizon, openproject, discourse). Fix docker-compose postgres command (-c flags split). Add unit tests. Minor env/locale tweaks and includes.
Conversation: https://chatgpt.com/share/68b48e72-cc28-800f-9c21-270cbc17d82a  
						
						
					 
					
						2025-08-31 20:04:14 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b3dfb8bf22 
					 
					
						
						
							
							Fix: Resolved Discourse plugin bug and unified variable/path handling  
						
						... 
						
						
						
						- Discourse: fixed 'DISCOURSE_CONTAINERS_DIR' and 'DISCOURSE_APPLICATION_YML_DEST'
- Nextcloud: improved plugin enable/configure tasks formatting
- WordPress: unified OIDC, msmtp, and upload.ini variables and tasks
- General: aligned spacing and switched to path_join for consistency 
						
						
					 
					
						2025-08-29 20:53:36 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2fccebbd1f 
					 
					
						
						
							
							Enforce uppercase README.md and TODO.md filenames  
						
						... 
						
						
						
						- Renamed all Readme.md → README.md
- Renamed all Todo.md → TODO.md
- Added integration test (tests/integration/test_filename_conventions.py) to automatically check naming convention.
Background:
Consistency in file naming (uppercase README.md and TODO.md) avoids issues with case-sensitive filesystems and ensures desktop cards (e.g. Pretix) are properly included.
Ref: https://chatgpt.com/share/68b1d135-c688-800f-9441-46a3cbfee175  
						
						
					 
					
						2025-08-29 18:11:53 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6ea8301364 
					 
					
						
						
							
							Refactor: migrate cmp/* and srv/* roles into sys-stk/* and sys-svc/* namespaces  
						
						... 
						
						
						
						- Removed obsolete 'cmp' category, introduced 'stk' category (fa-bars-staggered icon).
- Renamed roles:
  * cmp-db-docker → sys-stk-back-stateful
  * cmp-docker-oauth2 → sys-stk-back-stateless
  * srv-domain-provision → sys-stk-front
  * cmp-db-docker-proxy → sys-stk-full-stateful
  * cmp-docker-proxy → sys-stk-full-stateless
  * cmp-rdbms → sys-svc-rdbms
- Updated all include_role references, vars, templates and README.md files.
- Adjusted run_once comments and variable paths accordingly.
- Updated all web-app roles to use new sys-stk/* and sys-svc/* roles.
Conversation: https://chatgpt.com/share/68b0ba66-09f8-800f-86fc-76c47009d431  
						
						
					 
					
						2025-08-28 22:23:09 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						cb66fb2978 
					 
					
						
						
							
							Refactor LDAP variable schema to use top-level constant LDAP and nested ALL-CAPS keys.  
						
						... 
						
						
						
						- Converted group_vars/all/13_ldap.yml from lower-case to ALL-CAPS nested keys.
- Updated all roles, tasks, templates, and filter_plugins to reference LDAP.* instead of ldap.*.
- Fixed Keycloak JSON templates to properly quote Jinja variables.
- Adjusted svc-db-openldap filter plugins and unit tests to handle new LDAP structure.
- Updated integration test to only check uniqueness of TOP-LEVEL ALL-CAPS constants, ignoring nested keys.
See: https://chatgpt.com/share/68b01017-efe0-800f-a508-7d7e2f1c8c8d  
						
						
					 
					
						2025-08-28 10:15:48 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						79517b2fe9 
					 
					
						
						
							
							Optimized spacing  
						
						
						
						
					 
					
						2025-08-20 01:01:32 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a10dd402b8 
					 
					
						
						
							
							refactor: improve service handling and introduce MODE_ASSERT  
						
						... 
						
						
						
						- Improved get_service_name filter plugin (clearer suffix handling, consistent var names).
- Added MODE_ASSERT flag to optionally execute validation/assertion tasks.
- Fixed systemd unit handling: consistent use of %I instead of %i, correct escaping of instance names.
- Unified on_failure behavior and alarm composer scripts.
- Cleaned up redundant logging, handlers, and debug config.
- Strengthened sys-service template resolution with assert (only active when MODE_ASSERT).
- Simplified timer and suffix handling with get_service_name filter.
- Hardened sensitive tasks with no_log.
- Added conditional asserts across roles (Keycloak, DNS, Mailu, Discourse, etc.).
These changes improve consistency, safety, and validation across the automation stack.
Conversation: https://chatgpt.com/share/68a4ae28-483c-800f-b2f7-f64c7124c274  
						
						
					 
					
						2025-08-19 19:02:52 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						d3cc187c3b 
					 
					
						
						
							
							Made System Email Variables UPPER  
						
						
						
						
					 
					
						2025-08-19 09:34:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0de26fa6c7 
					 
					
						
						
							
							Solved bug existed due to difference between mailu domain and hostname difference. also refactored during this to find the bug  
						
						
						
						
					 
					
						2025-08-16 14:29:07 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3b4821f7e7 
					 
					
						
						
							
							Solved missing logout injection bug and refactored srv-web-7-7-inj-compose  
						
						
						
						
					 
					
						2025-08-15 23:55:19 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						03564b34bb 
					 
					
						
						
							
							Optimized reset routine for docker images and specially discourse  
						
						
						
						
					 
					
						2025-08-15 21:35:45 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e3b09e7f1a 
					 
					
						
						
							
							Refactoring of discourse role during debugging  
						
						
						
						
					 
					
						2025-08-15 20:06:56 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						022800425d 
					 
					
						
						
							
							THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs  
						
						
						
						
					 
					
						2025-08-15 15:15:48 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0228014d34 
					 
					
						
						
							
							Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf  
						
						
						
						
					 
					
						2025-08-14 14:39:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4a65a254ae 
					 
					
						
						
							
							replaced port-ui-desktop with desktop to make it more speakable  
						
						
						
						
					 
					
						2025-08-14 11:45:08 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2f12d8ea83 
					 
					
						
						
							
							Added handler for discourse buiöd  
						
						
						
						
					 
					
						2025-08-14 00:27:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						db0e030900 
					 
					
						
						
							
							Renamed general and mode constants and implemented a check to verify that constants are just defined ones over the whole repository  
						
						
						
						
					 
					
						2025-08-13 19:11:14 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f31565e4c5 
					 
					
						
						
							
							Optimized URLS  
						
						
						
						
					 
					
						2025-08-13 00:33:47 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						632d922977 
					 
					
						
						
							
							Solved discourse flush handlers bug  
						
						
						
						
					 
					
						2025-08-12 14:59:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f72ac30884 
					 
					
						
						
							
							Replaced redirects by origine to raise performance  
						
						
						
						
					 
					
						2025-08-11 19:44:14 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						1496f1de95 
					 
					
						
						
							
							Replaced community.general.pacman: by pacman to raise performance  
						
						
						
						
					 
					
						2025-08-11 19:33:28 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6e04ac58d2 
					 
					
						
						
							
							Moved blocks to include_tasks to raise performance. Deploy was really slow  
						
						
						
						
					 
					
						2025-08-11 12:28:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c7b25ed093 
					 
					
						
						
							
							Normalized run_once_, made openresty handlers without when aviable and forced flush in run_once when blocks to avoid handlers with when conditions  
						
						
						
						
					 
					
						2025-08-08 15:32:26 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						9228d51e86 
					 
					
						
						
							
							Restructured server config  
						
						
						
						
					 
					
						2025-08-07 11:31:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						44e0fea0b2 
					 
					
						
						
							
							Renamed cymais to infinito and did some other optimations and logout implementations  
						
						
						
						
					 
					
						2025-07-29 16:35:42 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f62355e490 
					 
					
						
						
							
							Replaced nginx native with openresty for logout injection. Right now still buggy on nextcloud and espocrm  
						
						
						
						
					 
					
						2025-07-24 03:19:16 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0472fecd64 
					 
					
						
						
							
							Solved ooauth2 bugs and restructured postgres roile to implement extensions used by discourse  
						
						
						
						
					 
					
						2025-07-23 13:24:55 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c8be88e3b1 
					 
					
						
						
							
							Activated redis for oauth2 for large cookies  
						
						
						
						
					 
					
						2025-07-22 22:00:11 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4b9e7dd3b7 
					 
					
						
						
							
							Implemented universal logout  
						
						
						
						
					 
					
						2025-07-22 13:14:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						d86ca6cc0e 
					 
					
						
						
							
							Adapted discourse version to new code after the big refactoring  
						
						
						
						
					 
					
						2025-07-20 09:29:56 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6a1a83432f 
					 
					
						
						
							
							Different optimations and mig integration. test will fail due to strickter validation checks. need to be cleaned up tomorrow  
						
						
						
						
					 
					
						2025-07-18 20:08:20 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						169493179e 
					 
					
						
						
							
							Restructuring for new backup solution  
						
						
						
						
					 
					
						2025-07-16 19:09:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f9426cfb74 
					 
					
						
						
							
							Optimized role structure in preparation for new backup script  
						
						
						
						
					 
					
						2025-07-16 12:31:01 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						af3ea9039c 
					 
					
						
						
							
							Restructure and cleaned up in preparation of new backup logic  
						
						
						
						
					 
					
						2025-07-15 23:51:51 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ad60f5fb37 
					 
					
						
						
							
							Rmeoved is_feature_enabled function  
						
						
						
						
					 
					
						2025-07-13 17:54:09 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						756597668c 
					 
					
						
						
							
							Semi bsr for applications[] to prevent heavy to debug bugs in j2 - part 1  
						
						
						
						
					 
					
						2025-07-13 15:11:38 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						78031855b9 
					 
					
						
						
							
							Replaced portfolio_iframe by port-ui-desktop  
						
						
						
						
					 
					
						2025-07-13 14:22:36 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3b03c5171d 
					 
					
						
						
							
							Renamed the mariadb, openldap and postgres database  
						
						
						
						
					 
					
						2025-07-12 16:06:13 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e14e6b96e9 
					 
					
						
						
							
							Renamed Database roles  
						
						
						
						
					 
					
						2025-07-12 10:11:52 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7fba13b550 
					 
					
						
						
							
							Solved wrong namings  
						
						
						
						
					 
					
						2025-07-11 02:59:25 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5a3535187a 
					 
					
						
						
							
							Restructured service und web role naming in inventor  
						
						
						
						
					 
					
						2025-07-10 14:01:12 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						707cc9d2d1 
					 
					
						
						
							
							Removed ignore errors from db management in discourse  
						
						
						
						
					 
					
						2025-07-10 11:44:35 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7a38241485 
					 
					
						
						
							
							Made code more modular and refactored to cmp roles  
						
						
						
						
					 
					
						2025-07-09 20:15:32 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c9c73cbdb2 
					 
					
						
						
							
							Decoupeld database, docker and proxy  
						
						
						
						
					 
					
						2025-07-09 14:21:30 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						af3767fdfa 
					 
					
						
						
							
							General optimations  
						
						
						
						
					 
					
						2025-07-09 10:17:32 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						575df76ec3 
					 
					
						
						
							
							Shortened service- to svc-  
						
						
						
						
					 
					
						2025-07-09 05:00:41 +02:00