mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-02 07:38:22 +00:00
- Replace legacy utils/run_once.yml with the new helpers utils/once_flag.yml and utils/once_finalize.yml - Introduce utils/compose_up.yml to ensure docker-compose stacks are up and to flush handlers safely without coupling to run-once flags - Migrate all affected roles (desk-*, dev-*, sys-ctl-*, sys-svc-*, web-app-*, web-svc-*, util-*) to the new run-once helpers - Rework sys-svc-msmtp to auto-load Mailu once per deploy, check reachability, and reuse the running stack instead of requiring multiple playbook passes - Adjust web-app-mailu to integrate cert deployment, handler flushing, and run-once handling so Mailu is fully initialized in a single deploy - Improve Matomo, CDN, logout and CSP/health-check related roles to cooperate with the new compose_up / once_* pattern - Simplify alarm/backup/timer/service orchestration (sys-ctl-alm-*, sys-bkp-provider, sys-timer-cln-bkps, etc.) by moving run-once logic into dedicated 01_core.yml files - Update integration tests so utils/once_flag.yml and utils/once_finalize.yml are recognised as valid run-once providers, keeping the global run_once_* guarantees consistent - Align frontend injection and service dependencies so Mastodon- and Mailu-related services can be brought up coherently within a single deployment cycle rather than several iterations
Nginx File Server
🔥 Description
The Nginx File Server role sets up a simple and secure static file server using Nginx. It provides an easy way to serve files over HTTPS, including directory listing, .well-known support, and automatic SSL/TLS certificate integration via Let's Encrypt.
📖 Overview
Optimized for Archlinux, this role configures Nginx to act as a lightweight and efficient file server. It ensures that files are served securely, with optional directory browsing enabled, and proper MIME type handling for standard web clients.
Key Features
- HTTPS Secured File Hosting: Automatically retrieves SSL/TLS certificates using Let's Encrypt.
- Autoindex Directory Listing: Displays files and folders in a clean and human-readable format.
- .well-known Support: Fully supports ACME and other
.well-knownpath requirements. - Customizable File Path: Easily adjust the root directory for your files through Ansible variables.
- Local Time Display: Enhances directory listings by showing local timestamps.
🎯 Purpose
The Nginx File Server role is ideal for hosting static files, sharing resources internally or externally, and serving ACME challenges for certificate issuance. It offers a reliable and minimalistic alternative to more complex file-sharing solutions.
🚀 Features
- Automatic SSL/TLS Certificate Management: Integrates with Let's Encrypt for secure access.
- Simple Configuration: Minimal setup with clear, maintainable templates.
- Directory Listings: Enables browsing through served files with human-readable file sizes and timestamps.
- Static Content Hosting: Serve any type of static files (documents, software, media, etc.).
- Well-Known Folder Support: Allows serving validation files and other standardized resources easily.