Files
computer-playbook/roles/web-app-seaweedfs/templates/proxy.conf.j2
kevinveenbirkenbachandClaude Opus 5 5137465c6f style: delete every comment the comments-valid policy rejects
3529 invalid comments in 528 files, grandfathered in while the linter
only saw the working-tree diff. Removal ran through the linter's own
collectors, so detection and deletion cannot drift: a comment whose
opener line is blank before it and whose closer line is blank after it
loses all its lines, anything else loses only the comment region, and a
line left holding a bare delimiter goes with it.

Five files keep their comments behind a nocheck marker instead. Four are
upstream configs whose inline docs are upstream's own (mautrix, systemd
journald, nextcloud-oidc-login, MediaWiki). In littlejs the
commented-out entries ARE the deactivation mechanism for an example
tile, so deleting them would delete configuration.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-18 03:22:02 +02:00

39 lines
1.4 KiB
Django/Jinja

{% set application_id = front_proxy_application_id | default(application_id) %}
{% set domain = front_proxy_domain | default(domain) %}
server
{
server_name {{ domain }};
{% include 'roles/sys-svc-proxy/templates/headers/buffers.conf.j2' %}
{% if domain == lookup('config', application_id, 'domains.canonical.api') %}
{% include 'roles/sys-front-tls/templates/nginx_ssl_header.j2' %}
{% set sso_proxy_enabled = false %}
{% set proxy_lua_enabled = false %}
{% set webserver_client_max_body_size = '0' %}
{% set location = "/" %}
{% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}
{% elif lookup('sso', application_id, 'is_proxy_gated') %}
{% include 'roles/web-app-keycloak/templates/sso_proxy/endpoint.conf.j2'%}
{% include 'roles/sys-front-inj-all/templates/server.conf.j2'%}
{% include 'roles/sys-front-tls/templates/nginx_ssl_header.j2' %}
{% set sso_proxy_enabled = true %}
{% set location = "/" %}
{% set proxy_service_key = 'sso-proxy' %}
{% set proxy_internal_port = lookup('config', 'web-app-keycloak', 'services.sso_proxy.ports.internal.http') %}
{% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}
{% include 'roles/web-app-prometheus/templates/nginx/locations.conf.j2' %}
{% else %}
{% include 'roles/sys-front-tls/templates/nginx_ssl_header.j2' %}
location /
{
return 403;
}
{% endif %}
}