Files
computer-playbook/roles/web-app-kix/templates/env.j2
kevinveenbirkenbachandClaude Opus 4.8 15e7647d2f refactor(env): central TZ+LANG base included by every role env.j2
New roles/sys-svc-container/templates/env.j2 sets TZ={{ HOST_TIMEZONE }} and LANG=C.UTF-8. Every role env.j2 includes it at the top; it renders via stack_host_template, the same engine that resolves the includes in compose.yml.j2, so it works in both compose and swarm. TZ/LANG are removed from the individual role env.j2 so each value stays single-source.

New lint tests/lint/ansible/test_env_base_include.py verifies every role env.j2 includes the base and never re-sets a base-owned key (keys derived from the base file).

mattermost and gitea meta/volumes.yml drop the /etc/timezone host-path bind: swarm hard-rejects a task whose bind source is missing on the node (Debian-trixie nodes have no /etc/timezone). TZ now comes from the base env. /etc/localtime bind also dropped; the container timezone follows TZ.

Non-directive comments were removed from the touched env.j2 (banners, restatements, reference URLs, narration) so the changed files pass the comment-lint; only tool directives remain.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-15 22:13:57 +02:00

31 lines
957 B
Django/Jinja

{% include 'roles/sys-svc-container/templates/env.j2' %}
NAME=kix
INITIAL_ADMIN_PW={{ KIX_INITIAL_ADMIN_PW | dotenv_quote }}
FRONTEND_PORT={{ lookup('config', application_id, 'services.kix.ports.local.http') }}
BACKEND_PORT=20000
SSP_PORT=20002
FRONTEND_PORT_SSL=20444
BACKEND_PORT_SSL=20443
SSP_PORT_SSL=20445
KIXDB_HOST={{ lookup('database', application_id, 'host') }}
KIXDB_DBMS=postgresql
KIXDB_DATABASE={{ lookup('database', application_id, 'name') }}
KIXDB_USER={{ lookup('database', application_id, 'username') }}
KIXDB_PASSWORD={{ lookup('database', application_id, 'password') | dotenv_quote }}
LOG_LEVEL={% if MODE_DEBUG | bool %}3{% else %}2{% endif %}
STOP_GRACE_PERIOD=60s
{% set email = lookup('email', application_id) %}
{% if email.enabled | bool %}
SMTP_HOST={{ email.host }}
SMTP_PORT={{ email.port }}
SMTP_USER={{ email.username }}
SMTP_PASSWORD={{ email.password | dotenv_quote }}
SMTP_FROM=no-reply@{{ email.domain }}
{% endif %}