mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-31 02:10:05 +00:00
Kevin Veen-Birkenbach
4ae3cee36c
• Add tasks/01_core.yml to set applications[application_id].server.csp.whitelist['connect-src'] = LOGOUT_CONNECT_SRC_NEW. • Switch tasks/main.yml to include 01_core.yml (run-once guard preserved). • Update templates/env.j2 to emit LOGOUT_DOMAINS as a comma-separated list. • Rework vars/main.yml: compute LOGOUT_DOMAINS, derive LOGOUT_ORIGINS with WEB_PROTOCOL, read connect-src via the get_app_conf filter, and merge/dedupe (unique). Rationale: ensure CSP allows cross-domain logout requests for all configured services. Conversation: https://chatgpt.com/share/68b5b07d-b208-800f-b6b2-f26934607c8a
12 lines
908 B
YAML
12 lines
908 B
YAML
application_id: "web-svc-logout"
|
|
docker_repository_address: "https://github.com/kevinveenbirkenbach/universal-logout"
|
|
docker_pull_git_repository: true
|
|
container_port: 8000
|
|
|
|
# The following line leads to that services which arent listed directly in the inventory,
|
|
# but are called over other roles, aren't listed here
|
|
# @todo implement the calling of also dependency domains (propably the easiest to write a script which adds all dependencies to group_names)
|
|
LOGOUT_DOMAINS: "{{ (applications | logout_domains(group_names)) | unique }}"
|
|
LOGOUT_ORIGINS: "{{ LOGOUT_DOMAINS | map('regex_replace', '^(.*)$', WEB_PROTOCOL ~ '://\\1') | list }}"
|
|
LOGOUT_CONNECT_SRC_OLD: "{{ applications | get_app_conf(application_id,'server.csp.whitelist.connect-src') }}"
|
|
LOGOUT_CONNECT_SRC_NEW: "{{ (LOGOUT_CONNECT_SRC_OLD + LOGOUT_ORIGINS) | unique }}" |