optimized for easier debugging

roles/sys-svc-letsencrypt/templates/ssl_credentials.j2

@@ -1,3 +1,3 @@
-ssl_certificate         {{ [ LETSENCRYPT_LIVE_PATH, ssl_cert_folder, 'fullchain.pem'] | path_join }};
-ssl_certificate_key     {{ [ LETSENCRYPT_LIVE_PATH, ssl_cert_folder, 'privkey.pem'  ] | path_join }};
-ssl_trusted_certificate {{ [ LETSENCRYPT_LIVE_PATH, ssl_cert_folder, 'chain.pem'    ] | path_join }};
+ssl_certificate         {{ [ LETSENCRYPT_LIVE_PATH | mandatory, ssl_cert_folder | mandatory, 'fullchain.pem'] | path_join }};
+ssl_certificate_key     {{ [ LETSENCRYPT_LIVE_PATH | mandatory, ssl_cert_folder | mandatory, 'privkey.pem'  ] | path_join }};
+ssl_trusted_certificate {{ [ LETSENCRYPT_LIVE_PATH | mandatory, ssl_cert_folder | mandatory, 'chain.pem'    ] | path_join }};

roles/web-svc-collabora/tasks/01_core.yml

@@ -32,4 +32,6 @@
     and
     ('already present' not in (collabora_preview.stdout | default('')))
   async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
-  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
+  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
+
+- include_tasks: utils/run_once.yml

roles/web-svc-collabora/tasks/main.yml

@@ -1,5 +1,3 @@
-- block:
-  - name: "Load core functions for '{{ application_id }}'"
-    include_tasks: 01_core.yml
-  - include_tasks: utils/run_once.yml
+- name: "Load core functions for '{{ application_id }}'"
+  include_tasks: 01_core.yml
   when: run_once_web_svc_collabora is not defined

tests/integration/test_csp_configuration_consistency.py

@@ -31,6 +31,8 @@ class TestCspConfigurationConsistency(unittest.TestCase):
         "worker-src",
         "manifest-src",
         "media-src",
+        "style-src-attr",
+        "script-src-attr",
     }
 
     SUPPORTED_FLAGS = {"unsafe-eval", "unsafe-inline"}