7 Commits

Author	SHA1	Message	Date
Kevin Veen-Birkenbach	57d5269b07	CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers ... - Add CSP3 support for style/script: include -elem and -attr directives - Base (style-src, script-src) now unions elem/attr (CSP2/Safari fallback) - Respect explicit base disables (e.g. style-src.unsafe-inline: false) - Hashes only when 'unsafe-inline' absent in the final base tokens - Nginx: set CSP only for HTML/worker via header_filter_by_lua_block; drop for subresources - Remove per-location header_filter; keep body_filter only - Update app role flags to *-attr where appropriate; extend desktop CSS sources - Add comprehensive unit tests for union/explicit-disable/no-mirror-back Ref: https://chatgpt.com/share/68f87a0a-cebc-800f-bb3e-8c8ab4dee8ee	2025-10-22 13:53:06 +02:00
Kevin Veen-Birkenbach	7a119c3175	Deactivated CSS for Open WebUI	2025-09-23 02:21:59 +02:00
Kevin Veen-Birkenbach	93d165fa4c	Solved CSP issue	2025-09-22 21:22:35 +02:00
Kevin Veen-Birkenbach	002f45d1df	Added LDAP draft for Open WebUI - Deactivated just PoC, because OIDC is anyhow prefered	2025-09-22 20:02:36 +02:00
Kevin Veen-Birkenbach	70d395ed15	feat(web-app-openwebui): add OIDC support via env.j2 with feature flag ... Enables OIDC login by adding feature flag (features.oidc), rendering OIDC-related environment variables, and introducing OPENWEBUI_OIDC_ENABLED. Conversation: https://chatgpt.com/share/68d18e02-d6b8-800f-aaab-920c61b9284a	2025-09-22 19:57:55 +02:00
Kevin Veen-Birkenbach	588cd1959f	Added local_ai configuration feature	2025-09-22 18:56:38 +02:00
Kevin Veen-Birkenbach	5d1210d651	feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack ... • Add svc-ai category under roles and load it in constructor stage • Create new 'svc-ai-ollama' role (vars, tasks, compose, meta, README) and dedicated network • Refactor former AI stack into separate app roles: web-app-flowise and web-app-openwebui • Add web-app-minio role; adjust config (no central DB), meta (fa-database, run_after), compose networks include, volume key • Provide user-focused READMEs for Flowise, OpenWebUI, MinIO, Ollama • Networks: add subnets for web-app-openwebui, web-app-flowise, web-app-minio; rename web-app-ai → svc-ai-ollama • Ports: rename ai_* keys to web-app-openwebui / web-app-flowise; keep minio_api/minio_console • Add group_vars/all/17_ai.yml (OLLAMA_BASE_LOCAL_URL, OLLAMA_LOCAL_ENABLED) • Replace hardcoded include paths with path_join in multiple roles (svc-db-postgres, sys-service, sys-stk-front-proxy, sys-stk-full-stateful, sys-svc-webserver, web-svc-cdn, web-app-keycloak) • Remove obsolete web-app-ai templates/vars/env; split Flowise into its own role • Minor config cleanups (CSP flags to {}, central_database=false) https://chatgpt.com/share/68d15cb8-cf18-800f-b853-78962f751f81	2025-09-22 18:40:20 +02:00