mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-08 11:17:17 +02:00
Kevin Veen-Birkenbach
0a588023a7
- Add `server.config_upstream_url` default in `roles/web-app-bluesky/config/main.yml` to define upstream for /config (defaults to https://ip.bsky.app/config). - Introduce front-proxy injection `extra_locations.conf.j2` that: - proxies `/config` to the upstream, - sets SNI and correct Host header, - normalizes CORS headers for same-origin consumption. - Wire the proxy injection only for the Web domain in `roles/web-app-bluesky/tasks/main.yml` via `proxy_extra_configuration`. - Force fresh social-app checkout and patch `src/state/geolocation.tsx` to `const BAPP_CONFIG_URL = '/config'` in `roles/web-app-bluesky/tasks/02_social_app.yml`; notify `docker compose build` and `up`. - Tidy and re-group PDS env in `roles/web-app-bluesky/templates/env.j2` (no functional change). - Add vars in `roles/web-app-bluesky/vars/main.yml`: - `BLUESKY_FRONT_PROXY_CONTENT` (renders the extra locations), - `BLUESKY_CONFIG_UPSTREAM_URL` (reads `server.config_upstream_url`). Security/Scope: - Only affects the Bluesky web frontend (same-origin `/config`); PDS/API and AppView remain unchanged. Refs: - Conversation: https://chatgpt.com/share/68b8dd3a-2100-800f-959e-1495f6320aab
40 lines
1.2 KiB
YAML
40 lines
1.2 KiB
YAML
- name: "include docker-compose role"
|
|
include_role:
|
|
name: docker-compose
|
|
vars:
|
|
docker_compose_flush_handlers: false
|
|
|
|
- name: "Include front proxy for {{ BLUESKY_API_DOMAIN }}:{{ BLUESKY_API_PORT }}"
|
|
include_role:
|
|
name: sys-stk-front-proxy
|
|
vars:
|
|
domain: "{{ BLUESKY_API_DOMAIN }}"
|
|
http_port: "{{ BLUESKY_API_PORT }}"
|
|
|
|
- name: "Include front proxy for {{ BLUESKY_WEB_DOMAIN }}:{{ BLUESKY_WEB_PORT }}"
|
|
include_role:
|
|
name: sys-stk-front-proxy
|
|
vars:
|
|
domain: "{{ BLUESKY_WEB_DOMAIN }}"
|
|
http_port: "{{ BLUESKY_WEB_PORT }}"
|
|
proxy_extra_configuration: "{{ BLUESKY_FRONT_PROXY_CONTENT }}"
|
|
when: BLUESKY_WEB_ENABLED | bool
|
|
|
|
- name: "Include front proxy for {{ BLUESKY_VIEW_DOMAIN }}:{{ BLUESKY_VIEW_PORT }}"
|
|
include_role:
|
|
name: sys-stk-front-proxy
|
|
vars:
|
|
domain: "{{ BLUESKY_VIEW_DOMAIN }}"
|
|
http_port: "{{ BLUESKY_VIEW_PORT }}"
|
|
when: BLUESKY_VIEW_ENABLED | bool
|
|
|
|
- name: "Execute PDS routines"
|
|
ansible.builtin.include_tasks: "01_pds.yml"
|
|
|
|
- name: "Execute Social App routines"
|
|
ansible.builtin.include_tasks: "02_social_app.yml"
|
|
when: BLUESKY_WEB_ENABLED | bool
|
|
|
|
- name: "DNS for Bluesky"
|
|
include_tasks: "03_dns.yml"
|
|
when: DNS_PROVIDER | lower == 'cloudflare' |