mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
4a56b4c19c set services.element.force_verification to false only for
the SSO variants 0 and 2, on the reasoning that only the SSO specs log
the same account in twice. The deploy's second pass logs the variant 1
administrator (ansible flavor, SSO off, password login) in again. PASS 1
bootstraps the account's cross-signing identity, so in PASS 2 Element
stops on "Confirm your digital identity" ("Use another device" / "Can't
confirm?" / "Remove this device", no skip), and the password-login spec
times out at _shared.js:436 (fork run 40979252521, job 123823820263,
Discourse#1 with web-app-matrix variant 1, all three retries).
Variant 1 now sets force_verification to false like the other two. The
services.yml default stays true, so production keeps forced
verification. No variant exercises true end to end any more; the
follow-up issue restores one.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
151 lines
3.6 KiB
YAML
151 lines
3.6 KiB
YAML
---
|
|
# nocheck: clearnet-variant-tor — on an onion pick MATRIX_ONION_PRIMARY drops Jitsi and Element Call from Element, so no clearnet call surface is advertised
|
|
- services:
|
|
container_backup:
|
|
enabled: true
|
|
element:
|
|
force_verification: false
|
|
matrix:
|
|
flavor: ansible
|
|
coturn:
|
|
enabled: true
|
|
shared: true
|
|
css:
|
|
enabled: true
|
|
shared: true
|
|
dashboard:
|
|
enabled: true
|
|
shared: true
|
|
email:
|
|
enabled: true
|
|
shared: true
|
|
jitsi:
|
|
shared: true
|
|
ldap:
|
|
enabled: true
|
|
shared: true
|
|
logout:
|
|
enabled: true
|
|
shared: true
|
|
matomo:
|
|
enabled: true
|
|
shared: true
|
|
postgres:
|
|
shared: true
|
|
litellm:
|
|
enabled: false
|
|
sso:
|
|
enabled: true
|
|
shared: true
|
|
prometheus:
|
|
enabled: true
|
|
shared: true
|
|
seaweedfs:
|
|
enabled: true
|
|
shared: true
|
|
tor:
|
|
enabled: true
|
|
|
|
- services:
|
|
container_backup:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
element:
|
|
force_verification: false
|
|
matrix:
|
|
flavor: ansible
|
|
coturn:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
css:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
dashboard:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
email:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
jitsi:
|
|
shared: false
|
|
ldap:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
logout:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
matomo:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
postgres:
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
litellm:
|
|
enabled: false
|
|
sso:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
prometheus:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
seaweedfs:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
tor:
|
|
enabled: true
|
|
|
|
- services:
|
|
container_backup:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
element:
|
|
force_verification: false
|
|
matrix:
|
|
flavor: compose
|
|
seaweedfs:
|
|
enabled: true
|
|
shared: true
|
|
coturn:
|
|
enabled: true
|
|
shared: true
|
|
css:
|
|
enabled: true
|
|
shared: true
|
|
dashboard:
|
|
enabled: true
|
|
shared: true
|
|
email:
|
|
enabled: true
|
|
shared: true
|
|
ldap:
|
|
enabled: true
|
|
shared: true
|
|
logout:
|
|
enabled: true
|
|
shared: true
|
|
matomo:
|
|
enabled: true
|
|
shared: true
|
|
postgres:
|
|
shared: true
|
|
litellm:
|
|
enabled: true
|
|
sso:
|
|
enabled: true
|
|
shared: true
|
|
prometheus:
|
|
enabled: true
|
|
shared: true
|
|
tor:
|
|
enabled: true
|
|
addons:
|
|
mautrix-whatsapp:
|
|
enabled: true
|
|
mautrix-telegram:
|
|
enabled: true
|
|
mautrix-signal:
|
|
enabled: true
|
|
mautrix-slack:
|
|
enabled: true
|
|
mautrix-meta:
|
|
enabled: true
|