Files
computer-playbook/roles/web-app-xwiki/templates/xwiki.properties.j2
kevinveenbirkenbachandClaude Opus 4.8 4039313266 refactor(tasks): enforce and apply a single task-file numbering scheme
Add tests/lint/repository/test_task_file_numbering.py: numbered task
files use exactly two leading digits, a numbered *_core.yml must be
00_core.yml, per directory the numbers are unique/consecutive and start
at 01 (00 with a core file), numbered includes appear in ascending
order, and shared helpers live in tasks/utils/ instead of the numbered
chain.

Apply it across every role: rename NN_core.yml to 00_core.yml with a
consecutive down-shift of the siblings, move letter-suffix children into
a subdirectory named after their parent task, relocate helpers included
from more than one place into tasks/utils/, and update every reference
(include_tasks, path_absolute, .ansible-lint-ignore, requirement docs).
Legacy narration comments in the touched files are deleted; the upstream
xwiki.properties reference block opts out via nocheck. The unused
MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-23 20:01:31 +02:00

82 lines
3.2 KiB
Django/Jinja

{# nocheck: comments-valid upstream xwiki.properties reference documentation #}
# Proxy
xwiki.url.protocol={{ lookup('tls', application_id, 'protocols.web') }}
xwiki.url.host={{ domain }}
xwiki.url.port={{ lookup('tls', application_id, 'ports.web') }}
############################################
# OIDC
# Render this block only while the OIDC switch is ON in tasks/utils/flush_config.yml.
# During bootstrap we keep it OFF to avoid ClassNotFoundException before the extension is installed.
# @see https://extensions.xwiki.org/xwiki/bin/view/Extension/OpenID%20Connect/OpenID%20Connect%20Authenticator/
{% if xwiki_oidc_enabled_switch | bool %}
oidc.showLoginButton=true
oidc.provider={{ XWIKI_OIDC_PROVIDER }}
oidc.endpoint.authorization={{ XWIKI_OIDC_AUTHORIZATION }}
oidc.endpoint.token={{ XWIKI_OIDC_TOKEN }}
oidc.endpoint.userinfo={{ XWIKI_OIDC_USERINFO }}
oidc.endpoint.logout={{ XWIKI_OIDC_LOGOUT }}
oidc.clientid={{ XWIKI_OIDC_CLIENT_ID }}
oidc.secret={{ XWIKI_OIDC_CLIENT_SECRET }}
oidc.scope={{ XWIKI_OIDC_SCOPES }}
oidc.enableUser=true
#oidc.userinfoclaims={{ XWIKI_OIDC_GROUPS_CLAIM }}
#oidc.groups.claim={{ XWIKI_OIDC_GROUPS_CLAIM }}
#oidc.groups.mapping=XWiki.{{ XWIKI_ADMIN_GROUP_PAGE }}={{ XWIKI_OIDC_ADMIN_PROVIDER_GROUP }}
{% endif %}
# Start DW automatically and non-interactively
distribution.automaticStartOnMainWiki=true
distribution.automaticStartOnWiki=true
distribution.job.interactive=false
# Default flavor for main wiki
distribution.defaultUI=org.xwiki.platform:xwiki-platform-distribution-flavor-mainwiki
distribution.skip=false
distribution.wizard.enabled=true
{% if MODE_DEBUG | bool %}
# Root logger
logging.rootLogger=DEBUG, console
# XWiki OIDC extension
logging.logger.org.xwiki.contrib.oidc=TRACE
logging.logger.org.xwiki.contrib.oidc.internal=TRACE
logging.logger.org.xwiki.contrib.oidc.provider=TRACE
# OIDC extra (sometimes split in other packages)
logging.logger.org.xwiki.contrib.oidc.auth=TRACE
logging.logger.org.xwiki.contrib.oidc.client=TRACE
# Tomcat internals (servlet and HTTP handling)
logging.logger.org.apache.catalina.core=DEBUG
logging.logger.org.apache.coyote.http11=DEBUG
# Request/Resource handling
logging.logger.org.xwiki.resource=TRACE
logging.logger.org.xwiki.resource.internal=TRACE
logging.logger.org.xwiki.container.servlet=DEBUG
# Nimbus OIDC/OAuth + JOSE libraries
logging.logger.com.nimbusds=DEBUG
logging.logger.com.nimbusds.oauth2.sdk=DEBUG
logging.logger.com.nimbusds.openid.connect.sdk=DEBUG
logging.logger.com.nimbusds.jose=DEBUG
# Apache HttpClient (used under the hood by Nimbus)
logging.logger.org.apache.http=DEBUG
logging.logger.org.apache.http.wire=DEBUG # very verbose, raw request/response wire logs
# Pac4j (if your build uses it)
logging.logger.org.pac4j=DEBUG
{% endif %}
# Persist data in the Docker volume
environment.permanentDirectory={{ XWIKI_DOCK_DATA_DIR }}
# Make sure Extension Manager can fetch artifacts.
# IMPORTANT:
# - Java .properties does NOT support "+=" append. Only the LAST assignment wins.
# - Use a SINGLE line with comma-separated repositories.
# - The OIDC authenticator lives in xwiki-public. Without it, resolution fails.
# nocheck: url
extension.repositories=xwiki-public:maven:https://nexus.xwiki.org/nexus/content/groups/public/,central:maven:https://repo1.maven.org/maven2/