mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5.5
28a90a1634
HEALTH_CSP_SKIP_DOMAINS skipped every CURRENT_PLAY_REDIRECT_DOMAINS source: the DOMAIN_PRIMARY apex, the node onion apex, inventory redirect mappings and per-app aliases. The skip dates from when the checker judged the 301 itself; since csp-checker 3.0.0 it follows the redirect chain and judges the document it lands on. So a broken or unserved alias target, and a redirect leaving its network, were never loaded. A redirect source now stays skipped only when its target is not among CURRENT_PLAY_DOMAINS_ALL, i.e. lies off this node, like SOFTWARE_DOMAIN for the apex without web-app-dashboard. Every other source is crawled. Closes #929 Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
14 lines
730 B
YAML
14 lines
730 B
YAML
---
|
|
system_service_id: sys-ctl-hlth-csp
|
|
HEALTH_CSP_ONION_TIMEOUT_MS: "{{ (HEALTH_CSP_TIMEOUT_MS | int) * (lookup('config', 'svc-net-tor', 'services.tor.timeout_multipliers')[lookup('config', 'svc-net-tor',
|
|
'services.tor.flavor')] | int) }}"
|
|
HEALTH_CSP_ONION_DOMAIN_SECONDS: "{{ ((HEALTH_CSP_ONION_TIMEOUT_MS | int) // 1000) + (HEALTH_CSP_DOMAIN_RESERVE_SECONDS | int) }}"
|
|
HEALTH_CSP_ACCEPT_STATUS: "{{ lookup('csp_accept_status') }}"
|
|
HEALTH_CSP_SKIP_DOMAINS: >-
|
|
{{ (
|
|
lookup('csp_skip_domains', group_names=lookup('deployment').deployed)
|
|
+ (CURRENT_PLAY_REDIRECT_DOMAINS | default([])
|
|
| rejectattr('target', 'in', CURRENT_PLAY_DOMAINS_ALL)
|
|
| map(attribute='source') | list)
|
|
) | unique }}
|