Commit Graph

Select branches

Hide Pull Requests

master

#3

#4

#5

Mono Color

• d7d8578b13 fix(xwiki): correct extension.repositories format to id:type:url Kevin Veen-Birkenbach 2025-09-12 16:21:23 +02:00
• f106d5ec36 web-app-xwiki: admin bootstrap & REST/extension install fixes Kevin Veen-Birkenbach 2025-09-12 15:50:30 +02:00
• 53b3a3a7b1 Deactivated LDAP by default Kevin Veen-Birkenbach 2025-09-12 14:13:13 +02:00
• f576b42579 XWiki: two-phase bootstrap + extension install before enabling auth; add XOR validation Kevin Veen-Birkenbach 2025-09-12 14:04:02 +02:00
• b0f10aa0d0 Removed unnecessary just up Kevin Veen-Birkenbach 2025-09-12 13:21:29 +02:00
• a6a2be4373 Optimized Listmonk variables Kevin Veen-Birkenbach 2025-09-12 13:04:06 +02:00
• b7a7be4737 Fix XWiki automation bootstrap: - Accept HTTP 302 (Distribution Wizard redirects) in REST readiness and extension checks - Treat 302 as missing admin user during bootstrap - Move superadmin password to xwiki.cfg (correct location) - Disable automatic Distribution Wizard start in xwiki.properties - Standardize run_once includes for postgres, cdn, and xwiki roles Kevin Veen-Birkenbach 2025-09-12 06:50:24 +02:00
• 2d71c461de web-app-xwiki: add SuperAdmin bootstrap support Kevin Veen-Birkenbach 2025-09-12 06:13:34 +02:00
• 07b7c6484f xwiki: switch to PostgreSQL and remove custom Hibernate override Kevin Veen-Birkenbach 2025-09-12 05:46:45 +02:00
• cce33373ba sys-svc-dns: add apex A/AAAA records for SYS_SVC_DNS_BASE_DOMAINS via task_include Kevin Veen-Birkenbach 2025-09-12 04:30:59 +02:00
• fcc9dc71ef Removed solved Todos Kevin Veen-Birkenbach 2025-09-12 04:05:02 +02:00
• 1b42ca46e8 Removed sys-dns-cloudflare-records from web-opt-rdr-www because it's covered by other tasks Kevin Veen-Birkenbach 2025-09-12 03:55:52 +02:00
• ce8958cc01 sys-dns-wildcards: always create apex wildcard (*.apex); use explicit_domains for CURRENT_PLAY_DOMAINS_ALL list; update README and unit tests. Ref: https://chatgpt.com/share/68c37a74-7468-800f-a612-765bbbd442de Kevin Veen-Birkenbach 2025-09-12 03:47:37 +02:00
• 7e5990aa16 deploy(cli): auto-generate MODE_* flags from 01_modes.yml; remove legacy skip flags/params; drive cleanup via MODE_CLEANUP; validation via MODE_ASSERT; tests via MODE_TEST; drop MODE_BACKUP from 01_modes.yml. Ref: https://chatgpt.com/share/68c3725f-43a0-800f-9bb0-eb7cbf77ac24 Kevin Veen-Birkenbach 2025-09-12 03:08:18 +02:00
• 60ef36456a Optimized variables Kevin Veen-Birkenbach 2025-09-12 02:41:33 +02:00
• 3a8b9cc958 Deactivated proxy for wildcards Kevin Veen-Birkenbach 2025-09-12 02:20:59 +02:00
• a1a956585c Moved utils/run_once.yml to core Kevin Veen-Birkenbach 2025-09-12 02:20:26 +02:00
• 1a1f185265 Casted to bool to be sure it's interpretated correct Kevin Veen-Birkenbach 2025-09-12 02:19:47 +02:00
• 57ca6adaec MediaWiki: runtime patch for LocalSettings.php (URL, DB, lang) + safe quoting - Add 03_patch_settings.yml to sync $wgServer/$wgCanonicalServer, DB vars, and language - Use single-quoted PHP strings with proper escaping; idempotent grep guards - Wire task into main.yml; rename 03_admin→04_admin and 04_extensions→05_extensions Kevin Veen-Birkenbach 2025-09-12 02:09:33 +02:00
• a0c2245bbd Refactor web-opt-rdr-www: - Split Cloudflare edge redirect into _01 and _02 task files - Wrap Cloudflare routines in a conditional block on DNS_PROVIDER - Preserve origin vs edge flavor handling Conversation: https://chatgpt.com/share/68c3609b-5624-800f-b5fa-69def6032dca Kevin Veen-Birkenbach 2025-09-12 01:52:13 +02:00
• 206b3eadbc refactor(dns): replace sys-dns-parent-hosts with sys-dns-wildcards; emit only *.parent wildcards from CURRENT_PLAY_DOMAINS_ALL Kevin Veen-Birkenbach 2025-09-12 01:40:06 +02:00
• feee3fd71f Fix false negatives in integration test for unused vars Kevin Veen-Birkenbach 2025-09-12 00:59:14 +02:00
• 39e745049b Revert "Removed incorrect flavor cloud for hetzner" Kevin Veen-Birkenbach 2025-09-12 00:43:46 +02:00
• db034553a3 Removed incorrect flavor cloud for hetzner Kevin Veen-Birkenbach 2025-09-12 00:41:18 +02:00
• f7e661bcca Todos solved and removed Kevin Veen-Birkenbach 2025-09-12 00:37:47 +02:00
• d5f1ae0288 Revert "Remmoved default filter" Kevin Veen-Birkenbach 2025-09-12 00:12:46 +02:00
• 3c3083481e Replaced CURRENT_PLAY_DOMAINS with CURRENT_PLAY_DOMAINS_ALL Kevin Veen-Birkenbach 2025-09-12 00:04:40 +02:00
• 7cfe97ab50 Remmoved default filter Kevin Veen-Birkenbach 2025-09-12 00:00:43 +02:00
• a552ea175d feat(dns): add sys-svc-dns role and extend parent DNS handling Kevin Veen-Birkenbach 2025-09-11 23:47:27 +02:00
• dc16b7d21c Removed refresh systemctl service listener for systemctl daemon Kevin Veen-Birkenbach 2025-09-11 22:37:16 +02:00
• 54797aa65b Surpress flushing of CSP and Webserver health checks during setup because tests will fail if procedures didn't finish Kevin Veen-Birkenbach 2025-09-11 22:31:24 +02:00
• a6e42bff9b Optimized more run_once routines for performance Kevin Veen-Birkenbach 2025-09-11 22:16:42 +02:00
• 58cf63c040 Removed deathlock and optimized run_once settings for performance Kevin Veen-Birkenbach 2025-09-11 21:48:56 +02:00
• 682ea6d7f2 Removed unnecessary --dirval-cmd dirval Kevin Veen-Birkenbach 2025-09-11 21:16:10 +02:00
• 486729d57d Removed directory-validator dependencies because it's installed via pkgmgr Kevin Veen-Birkenbach 2025-09-11 21:01:23 +02:00
• 5342f70b03 Solved wrong variable bugs :) Kevin Veen-Birkenbach 2025-09-11 20:58:02 +02:00
• d40a275d70 feat(sys-ctl-cln-faild-bkps): migrate role to cleanback CLI (systemd oneshot) and derive workers from Ansible facts - install via pkgmgr (CLEANUP_FAILED_BACKUPS_PKG=cleanback) - run: cleanback --all --dirval-cmd dirval --workers {{ CLEANUP_FAILED_BACKUPS_WORKERS }} --timeout {{ CLEANBACK_TIMEOUT_SECONDS }} --yes - remove obsolete systemctl template and path set_fact logic - keep task variable names intact; no defaults for runtime knobs - update README to reflect new behavior Kevin Veen-Birkenbach 2025-09-11 20:30:29 +02:00
• 3224e24d76 Refactor systemd handling Kevin Veen-Birkenbach 2025-09-11 18:24:21 +02:00
• 4539817c16 Mount hibernate.cfg.xml directly into Tomcat WEB-INF to ensure validationQuery is applied and avoid PROCESS privilege errors. See https://chatgpt.com/share/68c2c4dd-beec-800f-b44a-9c84494491f8 Kevin Veen-Birkenbach 2025-09-11 15:23:52 +02:00
• 1a377f1eb4 fix(categories): remove unused update-pkgmgr subcategory from categories.yml Kevin Veen-Birkenbach 2025-09-11 14:58:34 +02:00
• a356566822 Optimized categories for desktop Kevin Veen-Birkenbach 2025-09-11 14:48:54 +02:00
• 5af6c0ef1b Removed update-pip Kevin Veen-Birkenbach 2025-09-11 14:48:22 +02:00
• 71276f3e5a Add custom hibernate.cfg.xml to XWiki role to use SELECT 1 as validation query (avoids PROCESS privilege requirement in MariaDB). See https://chatgpt.com/share/68c2c4dd-beec-800f-b44a-9c84494491f8 Kevin Veen-Birkenbach 2025-09-11 14:47:41 +02:00
• d5d7a7dffb feat(nextcloud): add automatic installation of XWiki Nextcloud app when 'web-app-xwiki' is in group_names Kevin Veen-Birkenbach 2025-09-11 14:26:40 +02:00
• dcd1545093 Merge branch 'master' of github.com:kevinveenbirkenbach/infinito-nexus Kevin Veen-Birkenbach 2025-09-11 14:17:49 +02:00
• 04778a4fcc Activated LDAP for XWiki Kevin Veen-Birkenbach 2025-09-11 14:17:32 +02:00
• e57f3bfdc1 feat(menu): add Games, Sales, and Customer Relationship Management categories; rename IAM to User Management; update tags (see conversation: https://chatgpt.com/share/68c2bc3c-2178-800f-9c88-c2faf08989dd) Kevin Veen-Birkenbach 2025-09-11 14:11:02 +02:00
• cbfb096cdb Refactor web health checker & domain expectations (filter-based) Kevin Veen-Birkenbach 2025-09-11 13:58:16 +02:00
• 6418a462ec XWiki: LDAP/OIDC admin mapping, config mounts, and REST installs Kevin Veen-Birkenbach 2025-09-11 13:55:53 +02:00
• 8bc6e1f921 Optimized xwiki integration Kevin Veen-Birkenbach 2025-09-11 12:29:39 +02:00
• 91ce097a0a feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup Kevin Veen-Birkenbach 2025-09-10 17:24:56 +02:00
• 79c623d8db Add initial XWiki role draft Kevin Veen-Birkenbach 2025-09-10 16:34:37 +02:00
• 445c94788e Refactor: consolidate pkgmgr updates and remove legacy roles Kevin Veen-Birkenbach 2025-09-06 10:46:39 +02:00
• aac9704e8b Refactor: remove legacy update-docker role and references Kevin Veen-Birkenbach 2025-09-06 10:32:33 +02:00
• a57a5f8828 Refactor: remove Python-based Listmonk upgrade logic and implement upgrade as Ansible task Kevin Veen-Birkenbach 2025-09-06 10:25:41 +02:00
• 90843726de keycloak: update realm mail settings to use smtp_server.json.j2 (SPOT); merge via kc_merge_path; fix display name and SSL handling Kevin Veen-Birkenbach 2025-09-05 18:09:33 +02:00
• d25da76117 Solved wrong variable bug Kevin Veen-Birkenbach 2025-09-05 17:30:08 +02:00
• d48a1b3c0a Solved missing variable bugs. Role is not fully implemented need to pause development on it for the moment Kevin Veen-Birkenbach 2025-09-05 17:07:15 +02:00
• 2839d2e1a4 In between commit Magento implementation Kevin Veen-Birkenbach 2025-09-05 17:01:13 +02:00
• 00c99e58e9 Cleaned up bridgy fed Kevin Veen-Birkenbach 2025-09-04 17:09:35 +02:00
• 904040589e Added correct variables and health check Kevin Veen-Birkenbach 2025-09-04 15:13:10 +02:00
• 9f3d300bca Removed unneccessary handlers Kevin Veen-Birkenbach 2025-09-04 14:04:53 +02:00
• 9e253a2d09 Bluesky: Patch hardcoded IPCC_URL and proxy /ipcc Kevin Veen-Birkenbach 2025-09-04 13:45:57 +02:00
• 49120b0dcf Added more CSP headers Kevin Veen-Birkenbach 2025-09-04 13:36:35 +02:00
• b6f91ab9d3 changed database_user to database_username Kevin Veen-Birkenbach 2025-09-04 12:45:22 +02:00
• 77e8e7ed7e Magento 2.4.8 refactor: - Switch to split containers (markoshust/magento-php:8.2-fpm + magento-nginx:latest) - Disable central DB; use app-local MariaDB and pin to 11.4 - Composer bootstrap of Magento in php container (Adobe repo keys), idempotent via creates - Make setup:install idempotent; run as container user 'app' - Wire OpenSearch (security disabled) and depends_on ordering - Add credentials schema (adobe_public_key/adobe_private_key) - Update vars for php/nginx/search containers + MAGENTO_USER - Remove legacy docs (Administration.md, Upgrade.md) Context: changes derived from our ChatGPT session about getting Magento 2.4.8 running with MariaDB 11.4. Conversation: https://chatgpt.com/share/68b8dc30-361c-800f-aa69-88df514cb160 Kevin Veen-Birkenbach 2025-09-04 12:45:03 +02:00
• 32bc17e0c3 Optimized whitespacing Kevin Veen-Birkenbach 2025-09-04 12:41:11 +02:00
• e294637cb6 Changed db config path attribut Kevin Veen-Birkenbach 2025-09-04 12:34:13 +02:00
• 577767bed6 sys-svc-rdbms: Refactor database service templates and add version support for Magento Kevin Veen-Birkenbach 2025-09-04 12:32:34 +02:00
• e77f8da510 Added debug options to mastodon Kevin Veen-Birkenbach 2025-09-04 11:50:14 +02:00
• 4738b263ec Added docker_volume_path filter_plugin Kevin Veen-Birkenbach 2025-09-04 11:49:40 +02:00
• 0a588023a7 feat(bluesky): fix CORS by serving /config same-origin and pinning BAPP_CONFIG_URL Kevin Veen-Birkenbach 2025-09-04 02:29:10 +02:00
• d2fa90774b Added fediverse bridge draft Kevin Veen-Birkenbach 2025-09-04 02:26:27 +02:00
• 0e72dcbe36 feat(magento): switch to ghcr.io/alexcheng1982/docker-magento2:2.4.6-p3; update Compose/Env/Tasks/Docs Kevin Veen-Birkenbach 2025-09-04 02:25:49 +02:00
• 4f8ce598a9 Mastodon: allow internal chess host & refactor var names; OpenLDAP: safer get_app_conf Kevin Veen-Birkenbach 2025-09-03 21:44:47 +02:00
• 3769e66d8d Updated CSP for bluesky Kevin Veen-Birkenbach 2025-09-03 20:55:21 +02:00
• 33a5fadf67 web-app-chess: fix Corepack/Yarn EACCES and switch to ARG-driven Dockerfile Kevin Veen-Birkenbach 2025-09-03 20:47:50 +02:00
• 699a6b6f1e feat(web-app-magento): add Magento role + network/ports Kevin Veen-Birkenbach 2025-09-03 20:00:01 +02:00
• 61c29eee60 web-app-chess: build/runtime hardening & feature enablement Kevin Veen-Birkenbach 2025-09-03 19:56:13 +02:00
• d5204fb5c2 Removed unnecessary env loading Kevin Veen-Birkenbach 2025-09-03 17:41:53 +02:00
• 751615b1a4 Changed 09_ports.yml to 10_ports.yml Kevin Veen-Birkenbach 2025-09-03 17:40:59 +02:00
• e2993d2912 Added more CSP urls for bluesky Kevin Veen-Birkenbach 2025-09-03 17:31:29 +02:00
• 24b6647bfb Corrected variable Kevin Veen-Birkenbach 2025-09-03 17:30:31 +02:00
• d2dc2eab5f web-app-bluesky: refactor role, add Cloudflare DNS integration, split tasks Kevin Veen-Birkenbach 2025-09-03 16:37:35 +02:00
• a1130e33d7 web-app-chess: refactor runtime & entrypoint Kevin Veen-Birkenbach 2025-09-03 16:34:04 +02:00
• df122905eb mailu: include base defaults for oletools (env_file/LD_PRELOAD) Kevin Veen-Birkenbach 2025-09-03 14:42:50 +02:00
• d093a22d61 Added correct CSP for JIRA Kevin Veen-Birkenbach 2025-09-03 11:35:24 +02:00
• 5e550ce3a3 sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests Kevin Veen-Birkenbach 2025-09-03 11:24:14 +02:00
• 0ada12e3ca Enabled rpr service by failed health checkl isntead of tiumer Kevin Veen-Birkenbach 2025-09-03 10:46:46 +02:00
• 1a5ce4a7fa web-app-bookwyrm, web-app-confluence: - Fix BookWyrm email SSL/TLS handling (use ternary without 'not' for clarity) - Add truststore_enabled flag in Confluence config and vars - Wire JVM_SUPPORT_RECOMMENDED_ARGS to disable UPM signature check if truststore is disabled - Add placeholder style.css.j2 for Confluence Kevin Veen-Birkenbach 2025-09-03 10:45:41 +02:00
• a9abb3ce5d Added unsafe-eval csp to jira Kevin Veen-Birkenbach 2025-09-03 09:43:07 +02:00
• 71ceb339fc Fix Confluence & BookWyrm setup: - Add docker compose build trigger in docker-compose tasks - Cleanup svc-prx-openresty vars - Enable unsafe-inline CSP flags for BookWyrm, Confluence, Jira to allow Atlassian inline scripts - Generalize CONFLUENCE_HOME usage in vars, env and docker-compose - Ensure confluence-init.properties written with correct home - Add JVM_SUPPORT_RECOMMENDED_ARGS to pass atlassian.home - Update README to reference {{ CONFLUENCE_HOME }} Kevin Veen-Birkenbach 2025-09-02 22:49:02 +02:00
• 61bba3d2ef feat(bookwyrm): production-ready runtime + Redis wiring Kevin Veen-Birkenbach 2025-09-02 21:45:11 +02:00
• 0bde4295c7 Implemented correct confluence version Kevin Veen-Birkenbach 2025-09-02 17:01:58 +02:00
• 8059f272d5 Refactor Confluence and Jira env templates to use official Atlassian ATL_* database variables instead of unused custom placeholders. Ensures containers connect directly to PostgreSQL without relying on CONFLUENCE_DATABASE_* or JIRA_DATABASE_* vars. See conversation: https://chatgpt.com/share/68b6ddfd-3c44-800f-a57e-244dbd7ceeb5 Kevin Veen-Birkenbach 2025-09-02 14:07:38 +02:00
• 7c814e6e83 BookWyrm: update Dockerfile and env handling - Remove ARG BOOKWYRM_VERSION default, use Jinja variable directly - Add proper SMTP environment variables mapping (EMAIL_HOST, EMAIL_PORT, TLS/SSL flags, user, password, default_from) - Ensure env.j2 uses BookWyrm-expected names only Ref: ChatGPT conversation 2025-09-02 https://chatgpt.com/share/68b6dc73-3784-800f-9a7e-340be498a412 Kevin Veen-Birkenbach 2025-09-02 14:01:04 +02:00
• d760c042c2 Atlassian JVM sizing: cast memory vars to int before floor-division Kevin Veen-Birkenbach 2025-09-02 13:22:59 +02:00
• 6cac8085a8 feat(web-app-chess): add castling.club role with ports, networks, and build setup Kevin Veen-Birkenbach 2025-09-02 13:21:15 +02:00
• 3a83f3d14e Refactor BookWyrm role: switch to source-built Dockerfile, update README/meta for usability, add env improvements (ALLOWED_HOSTS, Redis vars, Celery broker), and pin version v0.7.5. See https://chatgpt.com/share/68b6d273-abc4-800f-ad3f-e1a5b9f8dad0 Kevin Veen-Birkenbach 2025-09-02 13:18:32 +02:00
• 61d852c508 Added ports and networks for bookwyrm, jira, confluence Kevin Veen-Birkenbach 2025-09-02 12:08:20 +02:00