mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
Add tests/lint/repository/test_task_file_numbering.py: numbered task files use exactly two leading digits, a numbered *_core.yml must be 00_core.yml, per directory the numbers are unique/consecutive and start at 01 (00 with a core file), numbered includes appear in ascending order, and shared helpers live in tasks/utils/ instead of the numbered chain. Apply it across every role: rename NN_core.yml to 00_core.yml with a consecutive down-shift of the siblings, move letter-suffix children into a subdirectory named after their parent task, relocate helpers included from more than one place into tasks/utils/, and update every reference (include_tasks, path_absolute, .ansible-lint-ignore, requirement docs). Legacy narration comments in the touched files are deleted; the upstream xwiki.properties reference block opts out via nocheck. The unused MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
82 lines
3.2 KiB
Django/Jinja
82 lines
3.2 KiB
Django/Jinja
{# nocheck: comments-valid upstream xwiki.properties reference documentation #}
|
|
# Proxy
|
|
xwiki.url.protocol={{ lookup('tls', application_id, 'protocols.web') }}
|
|
xwiki.url.host={{ domain }}
|
|
xwiki.url.port={{ lookup('tls', application_id, 'ports.web') }}
|
|
|
|
############################################
|
|
# OIDC
|
|
# Render this block only while the OIDC switch is ON in tasks/utils/flush_config.yml.
|
|
# During bootstrap we keep it OFF to avoid ClassNotFoundException before the extension is installed.
|
|
# @see https://extensions.xwiki.org/xwiki/bin/view/Extension/OpenID%20Connect/OpenID%20Connect%20Authenticator/
|
|
{% if xwiki_oidc_enabled_switch | bool %}
|
|
oidc.showLoginButton=true
|
|
oidc.provider={{ XWIKI_OIDC_PROVIDER }}
|
|
oidc.endpoint.authorization={{ XWIKI_OIDC_AUTHORIZATION }}
|
|
oidc.endpoint.token={{ XWIKI_OIDC_TOKEN }}
|
|
oidc.endpoint.userinfo={{ XWIKI_OIDC_USERINFO }}
|
|
oidc.endpoint.logout={{ XWIKI_OIDC_LOGOUT }}
|
|
oidc.clientid={{ XWIKI_OIDC_CLIENT_ID }}
|
|
oidc.secret={{ XWIKI_OIDC_CLIENT_SECRET }}
|
|
oidc.scope={{ XWIKI_OIDC_SCOPES }}
|
|
oidc.enableUser=true
|
|
#oidc.userinfoclaims={{ XWIKI_OIDC_GROUPS_CLAIM }}
|
|
#oidc.groups.claim={{ XWIKI_OIDC_GROUPS_CLAIM }}
|
|
#oidc.groups.mapping=XWiki.{{ XWIKI_ADMIN_GROUP_PAGE }}={{ XWIKI_OIDC_ADMIN_PROVIDER_GROUP }}
|
|
{% endif %}
|
|
|
|
# Start DW automatically and non-interactively
|
|
distribution.automaticStartOnMainWiki=true
|
|
distribution.automaticStartOnWiki=true
|
|
distribution.job.interactive=false
|
|
# Default flavor for main wiki
|
|
distribution.defaultUI=org.xwiki.platform:xwiki-platform-distribution-flavor-mainwiki
|
|
distribution.skip=false
|
|
distribution.wizard.enabled=true
|
|
|
|
{% if MODE_DEBUG | bool %}
|
|
# Root logger
|
|
logging.rootLogger=DEBUG, console
|
|
|
|
# XWiki OIDC extension
|
|
logging.logger.org.xwiki.contrib.oidc=TRACE
|
|
logging.logger.org.xwiki.contrib.oidc.internal=TRACE
|
|
logging.logger.org.xwiki.contrib.oidc.provider=TRACE
|
|
|
|
# OIDC extra (sometimes split in other packages)
|
|
logging.logger.org.xwiki.contrib.oidc.auth=TRACE
|
|
logging.logger.org.xwiki.contrib.oidc.client=TRACE
|
|
|
|
# Tomcat internals (servlet and HTTP handling)
|
|
logging.logger.org.apache.catalina.core=DEBUG
|
|
logging.logger.org.apache.coyote.http11=DEBUG
|
|
|
|
# Request/Resource handling
|
|
logging.logger.org.xwiki.resource=TRACE
|
|
logging.logger.org.xwiki.resource.internal=TRACE
|
|
logging.logger.org.xwiki.container.servlet=DEBUG
|
|
|
|
# Nimbus OIDC/OAuth + JOSE libraries
|
|
logging.logger.com.nimbusds=DEBUG
|
|
logging.logger.com.nimbusds.oauth2.sdk=DEBUG
|
|
logging.logger.com.nimbusds.openid.connect.sdk=DEBUG
|
|
logging.logger.com.nimbusds.jose=DEBUG
|
|
|
|
# Apache HttpClient (used under the hood by Nimbus)
|
|
logging.logger.org.apache.http=DEBUG
|
|
logging.logger.org.apache.http.wire=DEBUG # very verbose, raw request/response wire logs
|
|
|
|
# Pac4j (if your build uses it)
|
|
logging.logger.org.pac4j=DEBUG
|
|
{% endif %}
|
|
|
|
# Persist data in the Docker volume
|
|
environment.permanentDirectory={{ XWIKI_DOCK_DATA_DIR }}
|
|
|
|
# Make sure Extension Manager can fetch artifacts.
|
|
# IMPORTANT:
|
|
# - Java .properties does NOT support "+=" append. Only the LAST assignment wins.
|
|
# - Use a SINGLE line with comma-separated repositories.
|
|
# - The OIDC authenticator lives in xwiki-public. Without it, resolution fails.
|
|
# nocheck: url
|
|
extension.repositories=xwiki-public:maven:https://nexus.xwiki.org/nexus/content/groups/public/,central:maven:https://repo1.maven.org/maven2/ |