mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
kevinveenbirkenbachandClaude Opus 4.7
655e6df0ae
Follow-up to the initial web-app-jitsi commit. `make test` flagged 11 contract violations on the newly-added role; each is addressed here. - group_vars/all/08_networks.yml: declare PORT_BANDS.public.media (10000–10099) so the JVB media plane port (UDP/10000) falls in band. - roles/web-app-jitsi/templates/env.j2: pipe every Jicofo/JVB/Jigasi/Jibri XMPP password through `| dotenv_quote`. - roles/web-app-jitsi/meta/services.yml: make `email` flag dynamic (`'web-app-mailu' in group_names`) and add `# nocheck: dynamic-flag` + `# nocheck: playwright-service-flag` above `javascript:` (gated on sso.enabled, not on group_names; runtime DOM patch, no probe-able surface flag). - roles/web-app-jitsi/meta/variants.yml: re-add explicit email.enabled / email.shared pins per variant (variant-coverage rule requires every dynamic flag to have both true- and false-pinning variants). - roles/web-app-jitsi/meta/schema.yml: drop unused jwt_app_secret credential. - roles/web-app-jitsi/vars/main.yml: drop unreferenced JITSI_HOSTNAME, JITSI_WEB_PROTOCOL, JITSI_JWT_APP_SECRET. - roles/web-app-jitsi/templates/playwright.env.j2: drop unused ADMIN_EMAIL / JITSI_BASE_URL / OIDC_ISSUER_URL keys and collapse the PERSONA_*_BLOCKED comment block to one line per key (env-file schema rule allows at most one comment line above an entry). - roles/web-app-jitsi/README.md: replace the dead jitsi-contrib/prosody-plugins/tree/main/token_lobby URL with the repository root. Final result: `make test` 5/5 targets ✅ (186 tests OK), `make autoformat` clean. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
30 lines
1.3 KiB
Bash
30 lines
1.3 KiB
Bash
ADMIN_PASSWORD={{ lookup('users', 'administrator').password | dotenv_quote }}
|
|
|
|
ADMIN_USERNAME={{ lookup('users', 'administrator').username | dotenv_quote }}
|
|
|
|
APP_BASE_URL={{ lookup('tls', application_id, 'url.base') | dotenv_quote }}
|
|
|
|
BIBER_PASSWORD={{ lookup('users', 'biber').password | dotenv_quote }}
|
|
|
|
BIBER_USERNAME={{ lookup('users', 'biber').username | dotenv_quote }}
|
|
|
|
CANONICAL_DOMAIN={{ lookup('domain', application_id) | dotenv_quote }}
|
|
|
|
LDAP_SERVICE_ENABLED={{ lookup('config', application_id, 'services.ldap.enabled') | string | lower }}
|
|
|
|
LOGOUT_SERVICE_ENABLED={{ lookup('config', application_id, 'services.logout.enabled') | string | lower }}
|
|
|
|
MATOMO_BASE_URL={{ lookup('tls', 'web-app-matomo', 'url.base') | dotenv_quote }}
|
|
|
|
MATOMO_SERVICE_ENABLED={{ lookup('config', application_id, 'services.matomo.enabled') | string | lower }}
|
|
|
|
SSO_SERVICE_ENABLED={{ JITSI_OIDC_ENABLED | string | lower }}
|
|
|
|
{% if not JITSI_OIDC_ENABLED %}
|
|
# nocheck: persona-block-rationale — Jitsi has no in-app HTTP OIDC adapter; in V2 / V3 there is no auth chain the shared persona helpers can drive end-to-end (see README "Persona contract opt-outs").
|
|
PERSONA_BIBER_BLOCKED=true
|
|
|
|
# nocheck: persona-block-rationale — see PERSONA_BIBER_BLOCKED above.
|
|
PERSONA_ADMINISTRATOR_BLOCKED=true
|
|
{% endif %}
|