Files
computer-playbook/roles/web-app-pixelfed
Kevin Veen-Birkenbach 57d5269b07 CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
- Add CSP3 support for style/script: include -elem and -attr directives
- Base (style-src, script-src) now unions elem/attr (CSP2/Safari fallback)
- Respect explicit base disables (e.g. style-src.unsafe-inline: false)
- Hashes only when 'unsafe-inline' absent in the final base tokens
- Nginx: set CSP only for HTML/worker via header_filter_by_lua_block; drop for subresources
- Remove per-location header_filter; keep body_filter only
- Update app role flags to *-attr where appropriate; extend desktop CSS sources
- Add comprehensive unit tests for union/explicit-disable/no-mirror-back

Ref: https://chatgpt.com/share/68f87a0a-cebc-800f-bb3e-8c8ab4dee8ee
2025-10-22 13:53:06 +02:00
..
2025-08-27 18:11:31 +02:00

Pixelfed

Description

Pixelfed is a decentralized image-sharing platform that champions creativity and privacy. It offers a secure, community-driven alternative to centralized social networks by enabling federated communication and seamless content sharing through a modern web interface.

Overview

This Docker Compose deployment automates the installation and operation of a Pixelfed instance.

Features

  • Decentralized Content Sharing: Empower users to share photos and visual content across an interoperable, federated network with enhanced privacy controls.
  • Modern, Responsive Web Interface: Access an intuitive and adaptive UI for effortless browsing, administration, and content management.
  • Robust Scalability & Performance: Leverage integrated Redis caching and a reliable database (MariaDB or PostgreSQL) for smooth scaling and high performance.
  • Flexible Configuration: Customize cache sizes, domain settings, and authentication options via environment variables and templated configuration files.
  • Maintenance & Administration Tools: Built-in CLI and web-app-based tools to clear caches, manage the database, and monitor application health.
  • Single Sign-On (SSO) / OpenID Connect (OIDC): Seamless integration with external identity providers for centralized authentication.

Other Resources