kevinveenbirkenbachandClaude Opus 5.5 0d04336f93 perf(sys-front-inj-design): render each role design template once per include ...

The two Resolve tasks spent nearly all their time in the per-call
deep copy of ansible-core 2.20's template lookup, because every set_fact
value re-rendered the lazy task variables: the style include ran its
templates 6 times (10 with logo.css), the script include 6 times. On the
2fd6c6d deploys both together took 125 s on galaxyserver and 174 s on
echoserver.

The composed bodies now reach app.css.j2 and design.js.j2 through
template_vars, app_style_present tests the body directly (app.css.j2
always emits ":root {"), and the design check is inlined. Per include
the style lookups drop to 3 (5 with logo.css) and the script lookups to
4. The facts are byte-identical for 77 roles across clearnet, onion and
logo on or off, and for 36 edge cases, error messages included.

🎯 Fix: 92 %
💥 Break: 3 %
🌱 Efficiency: –
⚡ Speed: –
🛡️ Security: ~100 %
🏆 Score: 89
🚦 Gate: ✅ 90/5, efficiency and speed <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-05 11:08:50 +00:00

..

agents

fix(web-app-openclaw): admit the Control UI origin of every network the gateway serves

2026-10-24 19:13:55 +02:00

dev-python

style(dev-python): fold the env filter onto one line after the rename

2026-11-03 21:47:46 +01:00

svc-ai-agent-broker

fix(svc-ai-agent-broker): read the caller's groups on every completion

2026-10-15 15:29:04 +02:00

svc-ai-libretranslate-engine

feat(svc-ai-libretranslate-engine): serve translation without a browser surface

2026-09-28 23:41:57 +02:00

svc-ai-litellm

Merge branch 'main' into feature/store-i18n

2026-10-21 00:09:53 +02:00

svc-ai-ltengine

feat(svc-ai-ltengine): build against CUDA only where the host has a card

2026-10-05 20:29:21 +02:00

svc-ai-mcp-adapter

Merge branch 'main' into feature/store-i18n

2026-10-21 00:09:53 +02:00

svc-ai-s1

feat(svc-ai-s1): record how long each option took, not only which won

2026-10-21 13:17:26 +02:00

svc-bkp-container-2-local

…

svc-bkp-nfs-2-local

test(svc-bkp-nfs-2-local): take the project root from the test package

2026-10-28 18:18:00 +01:00

svc-bkp-remote-2-local

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

svc-bkp-volume-2-local

feat(backup): decide stop_required for every service with a backed-up volume

2026-10-28 15:10:24 +01:00

svc-db-openldap

fix(svc-db-openldap): name the user whose record lacks LDAP entry fields

2026-10-31 11:56:12 +01:00

svc-db-postgres

test: settle the CodeQL notes on the unit test imports

2026-10-28 03:29:23 +01:00

svc-net-firewall

fix(svc-swarm-node): drop outside traffic to non-public routing-mesh ports

2026-10-21 20:56:29 +02:00

svc-net-tor

Merge branch 'feature/updater' into feature/store-i18n

2026-10-29 12:54:41 +01:00

svc-net-tor-smtp

Merge branch 'main' into feature/network/multi-network-serving

2026-10-20 22:56:45 +02:00

svc-net-wireguard

fix(svc-net-wireguard): dial every endpoint at the IPv4 address it resolves to

2026-11-01 16:53:01 +01:00

svc-opt-keyboard-color

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

svc-opt-ssd-hdd

test(svc-opt-ssd-hdd): derive the registry domain in the image classification cases

2026-10-23 01:47:22 +02:00

svc-opt-swapfile

fix(svc-opt-swapfile): keep an active swapfile that already meets the requested size

2026-10-31 10:03:15 +01:00

svc-runner

test(svc-runner): read the role files through the ROLE_FILE constants

2026-11-04 21:39:08 +01:00

svc-storage-nfs-server

fix(svc-storage-nfs-server): send ganesha's log to the capped journal on every distro

2026-10-28 23:19:54 +01:00

sys-ca-selfsigned

Merge remote-tracking branch 'origin/main' into feature/network/multi-network-serving

2026-10-13 00:14:42 +02:00

sys-ctl-alm-email

test(mail): select autoescape for the rendered alarm script

2026-10-05 17:19:56 +02:00

sys-ctl-cln-bkps

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

sys-ctl-cln-disc-space

feat(cache): share package and tool caches across stacks and release swarm clusters after rescue

2026-10-30 22:04:38 +01:00

sys-ctl-hlth-csp

Merge branch 'feature/updater' into feature/store-i18n

2026-10-25 23:47:07 +01:00

sys-ctl-hlth-disc-space

Merge branch 'main' into feature/store-i18n

2026-10-21 00:09:53 +02:00

sys-ctl-hlth-journalctl

fix(sys-ctl-hlth-journalctl): read long and repeated MESSAGE fields

2026-10-16 22:11:09 +02:00

sys-ctl-hlth-msmtp

perf(email): resolve only the requested key in lookup('email')

2026-11-01 09:19:28 +01:00

sys-ctl-hlth-runtime

fix(sys-ctl-hlth-runtime): bound the engine calls and catch hidden PHP runtimes

2026-10-29 15:32:57 +01:00

sys-ctl-hlth-volumes

…

sys-ctl-hlth-webserver

fix(sys-ctl-hlth-webserver): expect 301 on every sibling of a redirect source

2026-10-28 03:18:57 +01:00

sys-ctl-rpr-container-hard

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

sys-ctl-rpr-container-soft

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

sys-dns-wildcards

feat(web-opt-rdr-domains): redirect a whole legacy zone with one wildcard source

2026-10-23 20:17:19 +02:00

sys-front-inj-all

Merge branch 'main' into feature/store-i18n

2026-10-21 00:09:53 +02:00

sys-front-inj-design

perf(sys-front-inj-design): render each role design template once per include

2026-11-05 11:08:50 +00:00

sys-front-inj-logout

feat(network): point logout and peer allowlists at every network a vhost serves

2026-10-30 18:00:24 +01:00

sys-front-inj-matomo

Merge branch 'feature/updater' into feature/store-i18n

2026-10-28 03:43:19 +01:00

sys-front-tls

Merge remote-tracking branch 'origin/main' into feature/store-i18n

2026-10-30 23:36:38 +01:00

sys-lock

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

sys-stk-backend

fix(svc-ai-searxng): bootstrap the compose host before the first notify

2026-09-23 18:20:05 +02:00

sys-stk-front-proxy

perf(sys-stk-front-proxy): probe every queued vhost in one parallel batch per stage

2026-10-25 18:16:04 +01:00

sys-svc-cdn

perf(sys-front-inj-design): skip repeat identical stylesheet writes per run

2026-11-05 08:40:44 +00:00

sys-svc-cln-domains

feat(sys-svc-cln-domains): remove the nginx configs of domains the host no longer serves

2026-10-23 21:25:50 +02:00

sys-svc-compose

fix(merge): run the #1212 rehash before compose pull and every compose up

2026-11-04 21:01:08 +01:00

sys-svc-compose-ca

perf(sys-svc-compose-ca): stop probing images on the swarm no-wrapper path

2026-11-03 16:14:01 +01:00

sys-svc-container

perf(sys-svc-container): roll a single-replica swarm service without a stagger delay

2026-11-03 12:45:15 +01:00

sys-svc-mail-msmtp

Merge remote-tracking branch 'origin/main' into feature/network/multi-network-serving

2026-10-13 00:14:42 +02:00

sys-svc-proxy

Merge branch 'main' into feature/updater-lockdown-probe

2026-10-30 00:08:59 +01:00

sys-svc-rdbms

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

sys-svc-webserver-core

test(sys-svc-webserver-core): stub IS_SWARM_MODE for the access-log render

2026-10-31 18:56:30 +01:00

sys-token-store

Merge branch 'feature/updater' into feature/store-i18n

2026-10-30 00:40:05 +01:00

sys-util-git-pull

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

test-e2e-cli

Merge branch 'main' into feature/store-i18n

2026-10-21 00:09:53 +02:00

test-e2e-playwright

perf(test-e2e-playwright): order Playwright passes by meta/tests.yml run_after

2026-10-31 21:41:55 +01:00

update

fix(update): stop retrying the 404 of pacman's optional database signature

2026-11-04 09:06:45 +01:00

web_app_keycloak

Merge branch 'feature/updater' into feature/store-i18n

2026-10-29 02:28:16 +01:00

web-app-baserow

fix(web-app-baserow): keep the idle database connection alive across the swarm VIP

2026-10-30 16:52:50 +01:00

web-app-bigbluebutton

fix(web-app-bigbluebutton): publish every container port once, on the proxy's upstream host

2026-11-03 12:34:22 +01:00

web-app-bookwyrm

Merge branch 'feature/network/multi-network-serving' into feature/store-i18n

2026-10-23 09:53:41 +02:00

web-app-confluence

feat(web-app-confluence, web-app-jira): refuse a pinned image older than the data

2026-10-22 10:38:11 +02:00

web-app-dashboard

fix(web-app-dashboard): build the dashboard image once for all network instances

2026-11-01 09:58:58 +01:00

web-app-decidim

fix(objstore): serve Decidim and Funkwhale object-store files from the app's own origin

2026-11-04 16:17:29 +01:00

web-app-discourse

test(web-app-discourse): build the vars path from ROLE_FILE_VARS_MAIN

2026-11-04 11:20:58 +01:00

web-app-docs

perf(web-app-docs): claim a build only for a free slot and skip current translations

2026-11-03 12:31:03 +01:00

web-app-erpnext

fix(web-app-erpnext): seed the standard price lists the skipped setup wizard creates

2026-11-01 16:45:53 +01:00

web-app-espocrm

fix(web-app-espocrm): keep the onion sibling's OIDC callback on its own host

2026-10-30 09:12:23 +01:00

web-app-fider

Merge remote-tracking branch 'origin/main' into feature/store-i18n

2026-10-30 23:36:38 +01:00

web-app-flowise

fix(web-app-flowise): stop retrying the MCP reconcile when Flowise refuses the key

2026-10-25 09:29:43 +01:00

web-app-funkwhale

refactor(web-app-funkwhale): drop the same_origin prefix from the module sources

2026-11-04 18:28:29 +01:00

web-app-gitea

fix(web-app-gitea): converge duplicate LDAP auth sources and keep the bind password off the host argv

2026-11-04 18:10:09 +01:00

web-app-gitlab

test(web-app-gitlab): build the runner-stdin environment with select_autoescape

2026-11-03 21:56:06 +01:00

web-app-homeassistant

fix(web-app-homeassistant): check the realigned owner against the recreated hub

2026-10-30 09:03:47 +01:00

web-app-jellyfin

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

web-app-jira

feat(web-app-confluence, web-app-jira): refuse a pinned image older than the data

2026-10-22 10:38:11 +02:00

web-app-joomla

fix(platform-admin): create platformadmin on existing installs in six roles

2026-11-01 01:21:20 +01:00

web-app-keycloak

fix(web-app-keycloak): close self-service email takeover

2026-11-01 08:57:17 +01:00

web-app-listmonk

feat(web-app-listmonk): carry the design in Listmonk's appearance settings

2026-10-13 02:01:02 +02:00

web-app-littlejs

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

web-app-magento

fix(web-app-magento): toggle the two-factor modules only when their state is wrong

2026-10-31 18:58:00 +01:00

web-app-mailu

Merge branch 'main' into feature/store-i18n

2026-10-21 00:09:53 +02:00

web-app-matomo

fix(web-app-matomo): install the image's release into the data volume on upgrade

2026-10-22 18:51:32 +02:00

web-app-matrix

fix(web-app-matrix): start Synapse on the rendered config before MDAD creates users

2026-10-30 09:06:28 +01:00

web-app-mediawiki

fix(platform-admin): create platformadmin on existing installs in six roles

2026-11-01 01:21:20 +01:00

web-app-moodle

test(web-app-moodle): mark the tempdir walk of the auth_oidc sync test

2026-11-03 21:43:54 +01:00

web-app-n8n

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

web-app-nextcloud

test: satisfy the role-file SPOT and cached-read lints in two new tests

2026-11-01 09:33:20 +01:00

web-app-odoo

fix(web-app-odoo): make the OAuth addon work on Odoo 20

2026-10-06 11:37:41 +02:00

web-app-openbao

Merge branch 'feature/updater' into feature/store-i18n

2026-10-29 02:28:16 +01:00

web-app-openclaw

fix(web-app-openclaw): admit the Control UI origin of every network the gateway serves

2026-10-24 19:13:55 +02:00

web-app-openproject

Merge branch 'feature/updater' into feature/store-i18n

2026-10-29 02:28:16 +01:00

web-app-openwebui

Merge branch 'main' into feature/store-i18n

2026-10-21 00:09:53 +02:00

web-app-peertube

feat(web-app-peertube): run the release migration scripts and refresh the client on upgrade

2026-10-22 10:18:09 +02:00

web-app-penpot

Merge remote-tracking branch 'origin/main' into feature/network/multi-network-serving

2026-10-13 00:14:42 +02:00

web-app-pgadmin

fix(web-app-pgadmin): keep the converger that asks the application, drop the one that asked a marker file

2026-10-17 14:43:48 +02:00

web-app-prometheus

fix(web-app-prometheus): keep cadvisor's scrape cost flat as containers grow

2026-10-31 18:01:14 +01:00

web-app-semaphore

feat(web-app-semaphore): sign in on the onion sibling as well as on clearnet

2026-10-29 02:29:59 +01:00

web-app-socialhome

fix(web-app-socialhome): realign the administrator password a rotation never reached

2026-10-16 18:57:37 +02:00

web-app-stalwart

perf(web-app-stalwart): batch independent management JMAP reads into one request each

2026-11-03 19:54:58 +01:00

web-app-suitecrm

fix(web-app-suitecrm): keep the onion sibling's SAML login on its own host

2026-10-30 09:32:23 +01:00

web-app-taiga

test(web-app-taiga): pass a neutral config-append marker in the static URL test

2026-10-31 14:07:46 +01:00

web-app-wazuh

fix(web-app-wazuh): give the manager room for the vulnerability feed and name failing API calls

2026-11-03 12:23:53 +01:00

web-app-weblate

test(web-app-weblate): keep the stand-ins next to the package tests

2026-10-31 19:13:53 +01:00

web-app-wordpress

feat(web-app-wordpress): set admin_email, blogname and the FreedomTranslate options through the options map

2026-11-04 12:53:11 +01:00

web-app-xwiki

fix(web-app-xwiki): only trust the running-wiki probe when the superadmin answered

2026-10-28 23:14:59 +01:00

web-app-zammad

Merge branch 'main' into feature/store-i18n

2026-10-19 01:54:37 +02:00

web-opt-rdr-www

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

web-svc-api

refactor(meta): label categories with one hieroglyph

2026-10-20 23:17:19 +02:00

web-svc-collabora

fix(web-svc-collabora): let every Nextcloud network sibling frame the editor

2026-10-31 18:42:09 +01:00

web-svc-coturn

Merge branch 'feature/updater' into feature/store-i18n

2026-10-28 04:00:56 +01:00

web-svc-libretranslate

test(gpu): make the lookup's consumers assert wiring instead of passing vacuously

2026-10-05 20:34:19 +02:00

web-svc-logout

fix(web-svc-logout): keep each conductor's sweep on its own network

2026-10-31 10:05:29 +01:00

web-svc-seaweedfs

fix(objstore): serve public bucket files same-origin on every vhost of the consumer

2026-10-30 21:52:35 +01:00

web-svc-translate

fix(web-svc-translate): answer a batch per string instead of failing it whole

2026-10-25 09:56:06 +01:00

__init__.py

…