Kevin Veen-Birkenbach 02f38d60db Added z.clarity.ms to mini-qr

2025-11-07 00:02:36 +01:00

..

desk-bluray-player

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-chromium

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-copyq

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-docker

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-firefox

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-git

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnome

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnome-caffeine

Refactor CDN and run_once handling

2025-09-01 14:11:36 +02:00

desk-gnome-extensions

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnome-terminal

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnucash

…

desk-jrnl

…

desk-keepassxc

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-libreoffice

…

desk-micro

…

desk-neovim

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-nextcloud

Optimized whitespacing

2025-09-23 00:51:23 +02:00

desk-obs

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-qbittorrent

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-retroarch

…

desk-spotify

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-ssh

Refactor CDN and run_once handling

2025-09-01 14:11:36 +02:00

desk-torbrowser

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-virtualbox

cleanup: remove unused handlers and add integration test for unused handlers

2025-09-02 11:02:30 +02:00

desk-zoom

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-base-devel

…

dev-fakeroot

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-gcc

…

dev-git

…

dev-java

…

dev-locales

Added setting of timezone

2025-10-15 02:24:25 +02:00

dev-make

…

dev-nodejs

…

dev-npm

…

dev-python-pip

…

dev-python-yaml

…

dev-shell

…

dev-yay

…

docker-compose

Refactor docker compose exec usage

2025-09-26 16:26:17 +02:00

docker-container

Add reusable HTTP healthcheck template and integrate into Shopware and Taiga roles

2025-11-02 22:26:42 +01:00

drv-epson-multiprinter

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

drv-intel

…

drv-lid-switch

…

drv-non-free

…

gen-hunspell

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

pkgmgr

…

pkgmgr-install

…

svc-ai-ollama

…

svc-bkp-loc-2-usb

…

svc-bkp-rmt-2-loc

svc-bkp-rmt-2-loc: migrate pull script to Python + add unit tests; lock down backup-provider ACLs

2025-10-14 20:10:49 +02:00

svc-db-mariadb

…

svc-db-memcached

…

svc-db-openldap

Optimize OpenLDAP container resources for up to 5k users (1.25 CPU / 1.5GB RAM / 1024 PIDs). See https://chatgpt.com/share/68ef7228-4028-800f-8986-54206a51b9c1

2025-10-15 12:06:51 +02:00

svc-db-postgres

feat(shopware): migrate to single Shopware base image and split services (web/worker/scheduler/init)

2025-11-03 01:51:38 +01:00

svc-db-redis

Refactored Redis resource include macro and increased memory limits

2025-10-20 20:08:38 +02:00

svc-net-wireguard-core

Solved wireguard name bugs

2025-08-29 13:03:06 +02:00

svc-net-wireguard-firewalled

…

svc-net-wireguard-plain

refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo

2025-08-19 15:00:44 +02:00

svc-opt-keyboard-color

…

svc-opt-ssd-hdd

…

svc-opt-swapfile

…

svc-prx-openresty

Refactor resource configuration:

2025-09-24 09:58:30 +02:00

sys-bkp-provider

…

sys-bkp-provider-user

Deactivated change when because its anyhow not trackable

2025-10-15 10:27:12 +02:00

sys-cli

…

sys-ctl-alm-compose

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-alm-email

Mailu/MSMTP: split token mgmt, idempotent reload, safer guards

2025-10-12 18:05:00 +02:00

sys-ctl-alm-telegram

…

sys-ctl-bkp-docker-2-loc

Refactor BigBlueButton and backup task structure:

2025-10-17 12:14:39 +02:00

sys-ctl-cln-anon-volumes

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-cln-bkps

Optimized variable whitespacing

2025-10-12 14:37:45 +02:00

sys-ctl-cln-certs

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-cln-disc-space

Added mastodon to disc space cleanup script

2025-10-12 14:37:19 +02:00

sys-ctl-cln-faild-bkps

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-hlth-btrfs

…

sys-ctl-hlth-csp

fix(sys-ctl-hlth-csp): ensure '--' separator is added when passing ignore list to checkcsp

2025-10-03 20:50:49 +02:00

sys-ctl-hlth-disc-space

…

sys-ctl-hlth-docker-container

…

sys-ctl-hlth-docker-volumes

…

sys-ctl-hlth-journalctl

…

sys-ctl-hlth-msmtp

…

sys-ctl-hlth-webserver

…

sys-ctl-mtn-cert-deploy

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-mtn-cert-renew

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-rpr-btrfs-balancer

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-rpr-docker-hard

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-ctl-rpr-docker-soft

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-daemon

Removed refresh systemctl service listener for systemctl daemon

2025-09-11 22:37:16 +02:00

sys-dns-cloudflare-records

…

sys-dns-hetzner-rdns

…

sys-dns-wildcards

Explicit activated async for creating of parent DNS entries

2025-09-20 09:30:16 +02:00

sys-front-inj-all

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

sys-front-inj-css

refactor(front-injection): stabilize run_once flow and explicit web-service loading

2025-10-13 15:12:23 +02:00

sys-front-inj-desktop

refactor(front-injection): stabilize run_once flow and explicit web-service loading

2025-10-13 15:12:23 +02:00

sys-front-inj-javascript

refactor(front-injection): stabilize run_once flow and explicit web-service loading

2025-10-13 15:12:23 +02:00

sys-front-inj-logout

refactor(front-injection): stabilize run_once flow and explicit web-service loading

2025-10-13 15:12:23 +02:00

sys-front-inj-matomo

refactor(front-injection): stabilize run_once flow and explicit web-service loading

2025-10-13 15:12:23 +02:00

sys-hostname

…

sys-lock

…

sys-postfix

…

sys-service

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-stk-back-stateful

…

sys-stk-back-stateless

…

sys-stk-front-base

…

sys-stk-front-proxy

CORS/CSP hardening & centralization

2025-09-29 12:23:58 +02:00

sys-stk-full-stateful

…

sys-stk-full-stateless

…

sys-stk-semi-stateless

…

sys-sudo

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

sys-svc-cdn

refactor(front-injection): stabilize run_once flow and explicit web-service loading

2025-10-13 15:12:23 +02:00

sys-svc-certbot

…

sys-svc-certs

…

sys-svc-cln-domains

…

sys-svc-dns

…

sys-svc-docker

infra(sys-service): centralize async control + pre-deploy backup safeguard

2025-10-02 11:58:23 +02:00

sys-svc-journalctl

…

sys-svc-letsencrypt

optimized for easier debugging

2025-10-25 12:52:17 +02:00

sys-svc-msmtp

Mailu/MSMTP: split token mgmt, idempotent reload, safer guards

2025-10-12 18:05:00 +02:00

sys-svc-proxy

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

sys-svc-rdbms

…

sys-svc-sshd

Optimize SSH connection performance by disabling GSSAPI authentication and reverse DNS lookups

2025-10-15 18:37:09 +02:00

sys-svc-webserver-core

Nextcloud/Talk: add Janus config & fix WebSocket proxying

2025-09-30 11:14:15 +02:00

sys-svc-webserver-https

…

sys-timer

refactor: improve service handling and introduce MODE_ASSERT

2025-08-19 19:02:52 +02:00

sys-timer-cln-bkps

…

sys-util-csp-cert

…

update-apt

…

update-compose

Refactor yay update handling:

2025-09-29 09:16:02 +02:00

update-pacman

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

user

Set MODE_CLEANUP default true and solved tld localhost user name bug

2025-10-12 01:15:52 +02:00

user-administrator

…

user-root

…

util-desk-browser

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-design

…

util-desk-dev-arduino

…

util-desk-dev-core

…

util-desk-dev-java

…

util-desk-dev-php

…

util-desk-dev-python

…

util-desk-dev-shell

…

util-desk-game-compose

…

util-desk-game-os

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-game-windows

…

util-desk-office

…

util-dev-admin

…

util-dev-admin-network

…

util-srv-corporate-identity

…

web-app-akaunting

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-baserow

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-bigbluebutton

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-bluesky

CORS/CSP hardening & centralization

2025-09-29 12:23:58 +02:00

web-app-bookwyrm

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-bridgy-fed

…

web-app-chess

…

web-app-confluence

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-desktop

Optimized code

2025-11-05 20:46:33 +01:00

web-app-discourse

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-elk

…

web-app-espocrm

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-flowise

…

web-app-friendica

Used path_join @ web-app-friendica

2025-10-26 15:48:28 +01:00

web-app-funkwhale

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-fusiondirectory

…

web-app-gitea

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-gitlab

Optimized CSP for Gitlab

2025-10-28 08:26:53 +01:00

web-app-jenkins

…

web-app-jira

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-joomla

Added joomla user for install

2025-11-03 11:24:56 +01:00

web-app-keycloak

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-lam

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-listmonk

Optimized Listmonk and Nextcloud CSP for hcaptcha

2025-10-30 16:02:09 +01:00

web-app-magento

…

web-app-mailu

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-mastodon

Added cleanup to mastodon

2025-10-12 14:03:28 +02:00

web-app-matomo

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-matrix

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-mediawiki

Solved Mediawiki CPS bug whichg prevented OIDC Login

2025-10-27 20:33:07 +01:00

web-app-mig

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-mini-qr

Added z.clarity.ms to mini-qr

2025-11-07 00:02:36 +01:00

web-app-minio

Added correct minio http statuscodes

2025-09-29 17:29:29 +02:00

web-app-mobilizon

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-moodle

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-navigator

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-nextcloud

Optimized Listmonk and Nextcloud CSP for hcaptcha

2025-10-30 16:02:09 +01:00

web-app-oauth2-proxy

Add basic healthcheck to oauth2-proxy container template using binary version check for distroless compatibility

2025-10-18 10:52:58 +02:00

web-app-openproject

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-openwebui

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-peertube

feat(web-app-peertube): add dynamic performance tuning for heap and transcoding concurrency

2025-11-03 21:47:38 +01:00

web-app-pgadmin

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-phpldapadmin

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-phpmyadmin

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-pixelfed

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-postmarks

Add README.md files for web-app-bookwyrm, web-app-postmarks, and web-app-socialhome roles

2025-09-02 11:52:34 +02:00

web-app-pretix

…

web-app-roulette-wheel

…

web-app-shopware

enh(shopware): improve healthchecks and proxy configuration

2025-11-06 14:17:00 +01:00

web-app-snipe-it

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-socialhome

…

web-app-sphinx

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-syncope

…

web-app-taiga

Add reusable HTTP healthcheck template and integrate into Shopware and Taiga roles

2025-11-02 22:26:42 +01:00

web-app-wordpress

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-app-xwiki

Refactor XWiki OIDC activation to use REST-based authenticationService update (reliable alternative to Groovy) — see ChatGPT discussion: https://chatgpt.com/share/69005d88-6bf8-800f-af41-73b0e5dc9c13

2025-10-29 11:12:19 +01:00

web-app-yourls

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-opt-rdr-domains

…

web-opt-rdr-www

…

web-svc-asset

…

web-svc-cdn

Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.

2025-09-30 17:22:28 +02:00

web-svc-collabora

optimized for easier debugging

2025-10-25 12:52:17 +02:00

web-svc-coturn

Solved coturn volume bug

2025-09-29 15:33:50 +02:00

web-svc-file

Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.

2025-09-30 17:22:28 +02:00

web-svc-html

Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.

2025-09-30 17:22:28 +02:00

web-svc-legal

Optimized path building

2025-09-30 16:36:28 +02:00

web-svc-libretranslate

CORS/CSP hardening & centralization

2025-09-29 12:23:58 +02:00

web-svc-logout

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

web-svc-simpleicons

Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.

2025-09-30 17:22:28 +02:00

web-svc-xmpp

…

__init__.py

…

.gitignore

Finished optimization for today

2025-03-20 17:00:07 +01:00

categories.yml

Solved rmt backup bugs

2025-10-14 16:29:42 +02:00

glosar.rst

Added new categories description scheme

2025-07-10 15:36:40 +02:00

index.rst

Optimized roles documentation

2025-07-12 17:52:36 +02:00