mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-06 05:08:16 +00:00
- Added 'font-src data:' to CSP whitelist to allow inline fonts in Admin UI - Refactored init.sh to run as root only for volume permission setup, then drop privileges to www-data - Unified all bash invocations to sh for POSIX compliance - Added missing 'bundles' named volume and mount to Docker Compose - Set init container to run as root (0:0) for permission setup - Added admin user rename step via Ansible task See discussion: https://chatgpt.com/share/69087361-859c-800f-862c-7413350cca3e
38 lines
1.6 KiB
YAML
38 lines
1.6 KiB
YAML
- name: "Rename default Shopware admin user to {{ users.administrator.username }}"
|
|
shell: |
|
|
docker exec -i --user {{ SHOPWARE_USER }} {{ SHOPWARE_WEB_CONTAINER }} sh -lc '
|
|
set -e
|
|
cd {{ SHOPWARE_ROOT }}
|
|
old_user="admin"
|
|
new_user="{{ users.administrator.username }}"
|
|
if php bin/console user:list | grep -q "^$old_user "; then
|
|
echo "[INFO] Renaming Shopware user: $old_user -> $new_user"
|
|
php bin/console user:update "$old_user" --username="$new_user" || true
|
|
else
|
|
echo "[INFO] No user named $old_user found (already renamed or custom setup)"
|
|
fi
|
|
'
|
|
args:
|
|
chdir: "{{ docker_compose.directories.instance }}"
|
|
changed_when: false
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
|
|
- name: "Ensure Shopware admin exists and has the desired password"
|
|
shell: |
|
|
docker exec -i --user {{ SHOPWARE_USER }} {{ SHOPWARE_WEB_CONTAINER }} sh -lc '
|
|
set -e
|
|
cd {{ SHOPWARE_ROOT }}
|
|
php bin/console user:create "{{ users.administrator.username }}" \
|
|
--admin \
|
|
--password="{{ users.administrator.password }}" \
|
|
--firstName="{{ users.administrator.username }}" \
|
|
--lastName="{{ PRIMARY_DOMAIN | lower }}" \
|
|
--email="{{ users.administrator.email }}" || true
|
|
php bin/console user:change-password "{{ users.administrator.username }}" \
|
|
--password="{{ users.administrator.password }}" || true
|
|
php bin/console user:update "{{ users.administrator.username }}" \
|
|
--email="{{ users.administrator.email }}" 2>/dev/null || true
|
|
'
|
|
args:
|
|
chdir: "{{ docker_compose.directories.instance }}"
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}" |