mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-08 19:27:18 +02:00
Kevin Veen-Birkenbach
0a588023a7
- Add `server.config_upstream_url` default in `roles/web-app-bluesky/config/main.yml` to define upstream for /config (defaults to https://ip.bsky.app/config). - Introduce front-proxy injection `extra_locations.conf.j2` that: - proxies `/config` to the upstream, - sets SNI and correct Host header, - normalizes CORS headers for same-origin consumption. - Wire the proxy injection only for the Web domain in `roles/web-app-bluesky/tasks/main.yml` via `proxy_extra_configuration`. - Force fresh social-app checkout and patch `src/state/geolocation.tsx` to `const BAPP_CONFIG_URL = '/config'` in `roles/web-app-bluesky/tasks/02_social_app.yml`; notify `docker compose build` and `up`. - Tidy and re-group PDS env in `roles/web-app-bluesky/templates/env.j2` (no functional change). - Add vars in `roles/web-app-bluesky/vars/main.yml`: - `BLUESKY_FRONT_PROXY_CONTENT` (renders the extra locations), - `BLUESKY_CONFIG_UPSTREAM_URL` (reads `server.config_upstream_url`). Security/Scope: - Only affects the Bluesky web frontend (same-origin `/config`); PDS/API and AppView remain unchanged. Refs: - Conversation: https://chatgpt.com/share/68b8dd3a-2100-800f-959e-1495f6320aab
44 lines
1.1 KiB
YAML
44 lines
1.1 KiB
YAML
features:
|
|
matomo: true
|
|
css: true
|
|
desktop: true
|
|
central_database: false
|
|
logout: true
|
|
server:
|
|
config_upstream_url: "https://ip.bsky.app/config"
|
|
domains:
|
|
canonical:
|
|
web: "bskyweb.{{ PRIMARY_DOMAIN }}"
|
|
api: "bluesky.{{ PRIMARY_DOMAIN }}"
|
|
view: "view.bluesky.{{ PRIMARY_DOMAIN }}"
|
|
csp:
|
|
whitelist:
|
|
connect-src:
|
|
- "{{ WEB_PROTOCOL }}://<< defaults_applications[web-app-bluesky].server.domains.canonical.api >>"
|
|
- https://plc.directory
|
|
- https://bsky.social
|
|
- https://api.bsky.app
|
|
- https://public.api.bsky.app
|
|
- https://events.bsky.app
|
|
- https://statsigapi.net
|
|
- https://ip.bsky.app
|
|
- https://video.bsky.app
|
|
- wss://bsky.network
|
|
- wss://*.bsky.app
|
|
media-src:
|
|
- "blob:"
|
|
worker-src:
|
|
- "blob:"
|
|
docker:
|
|
services:
|
|
database:
|
|
enabled: false
|
|
web:
|
|
enabled: true # @see https://github.com/bluesky-social/social-app
|
|
view:
|
|
enabled: false
|
|
pds:
|
|
image: "ghcr.io/bluesky-social/pds"
|
|
version: "latest"
|
|
volumes:
|
|
pds_data: "pds_data" |