Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.

Ref: https://chatgpt.com/share/68dbf59c-f424-800f-aa27-787db52e260f

roles/sys-svc-proxy/templates/location/html.conf.j2

@@ -19,6 +19,8 @@ location {{location}}
 
   {% include 'roles/sys-svc-proxy/templates/headers/content_security_policy.conf.j2' %}
 
+  {% include 'roles/sys-svc-proxy/templates/headers/access_control_allow.conf.j2' %}
+
   # WebSocket specific header
   proxy_http_version 1.1;
   proxy_set_header Upgrade $http_upgrade;

roles/web-app-peertube/templates/peertube.conf.j2

@@ -6,6 +6,8 @@ server {
   {% include 'roles/sys-front-inj-all/templates/server.conf.j2'%}
   
   {% include 'roles/sys-svc-proxy/templates/headers/content_security_policy.conf.j2' %}
+
+  {% include 'roles/sys-svc-proxy/templates/headers/access_control_allow.conf.j2' %}
   
   ##
   # Application

roles/web-svc-cdn/templates/nginx.conf.j2

@@ -7,6 +7,8 @@ server
   {% include 'roles/sys-front-inj-all/templates/server.conf.j2'%}
 
   {% include 'roles/sys-svc-proxy/templates/headers/content_security_policy.conf.j2' %}
+
+  {% include 'roles/sys-svc-proxy/templates/headers/access_control_allow.conf.j2' %}
   
   charset utf-8;
   

roles/web-svc-collabora/templates/nginx.conf.j2

@@ -2,10 +2,13 @@ server {
   server_name {{ domain }};
 
   {% include 'roles/sys-svc-letsencrypt/templates/ssl_header.j2' %}
+  
   {% include 'roles/sys-front-inj-all/templates/server.conf.j2'%}
 
   {% include 'roles/sys-svc-proxy/templates/headers/content_security_policy.conf.j2' %}
 
+  {% include 'roles/sys-svc-proxy/templates/headers/access_control_allow.conf.j2' %}
+
   {# Normal HTTP routes (discovery, browser, assets) – no Lua injection #}
   {% set proxy_lua_enabled = false %}
   {% set location = "/" %}

roles/web-svc-file/templates/nginx.conf.j2

@@ -8,6 +8,8 @@ server
 
   {% include 'roles/sys-svc-proxy/templates/headers/content_security_policy.conf.j2' %}
   
+  {% include 'roles/sys-svc-proxy/templates/headers/access_control_allow.conf.j2' %}
+
   charset utf-8;
   
   location /

roles/web-svc-html/templates/nginx.conf.j2

@@ -7,6 +7,8 @@ server
   {% include 'roles/sys-front-inj-all/templates/server.conf.j2'%}
 
   {% include 'roles/sys-svc-proxy/templates/headers/content_security_policy.conf.j2' %}
+
+  {% include 'roles/sys-svc-proxy/templates/headers/access_control_allow.conf.j2' %}
   
   charset utf-8;
   

roles/web-svc-legal/tasks/main.yml

@@ -2,6 +2,6 @@
 - name:         copy imprint.html
   template:
     src:        "imprint.html.j2" 
-    dest:       "{{NGINX.DIRECTORIES.DATA.HTML}}imprint.html"
+    dest:       "{{ [ NGINX.DIRECTORIES.DATA.HTML, 'imprint.html' ] | path_join }}"
     owner:      "{{ NGINX.USER }}"
     group:      "{{ NGINX.USER }}"

roles/web-svc-simpleicons/tasks/main.yml

@@ -4,10 +4,9 @@
     include_role:
       name: sys-stk-full-stateless
     vars:
-      aca_origin:   "* always"
-      aca_methods:  "'GET, OPTIONS' always"
-      aca_headers:  "'Accept, Authorization, Content-Type' always"
-
+      aca_origin:  "* always"
+      aca_methods: "'GET, OPTIONS' always"
+      aca_headers: '"Origin, X-Requested-With, Content-Type, Accept, Authorization" always'
   - name: "Copy '{{ application_id }}' files"
     template:
       src: "{{ item.source }}"