Files
computer-playbook/roles/web-app-matomo/config/main.yml
Kevin Veen-Birkenbach 5e616d3962 web: general domain cleanup (canonical/aliases normalization)
- Normalize domain blocks across apps:
  - Add explicit 'aliases: []' everywhere (no implicit aliases)
  - Standardize canonical subdomains for consistency:
    * Bluesky: web/api under *.bluesky.<PRIMARY_DOMAIN>
    * EspoCRM: espo.crm.<PRIMARY_DOMAIN>
    * Gitea:   tea.git.<PRIMARY_DOMAIN>
    * GitLab:  lab.git.<PRIMARY_DOMAIN>
    * Joomla:  joomla.cms.<PRIMARY_DOMAIN>
    * Magento: magento.shop.<PRIMARY_DOMAIN>
    * OpenProject: open.project.<PRIMARY_DOMAIN>
    * Pretix:  ticket.shop.<PRIMARY_DOMAIN>
    * Taiga:   kanban.project.<PRIMARY_DOMAIN>
  - Remove legacy/duplicate aliases and use empty list instead
  - Fix 'alias' -> 'aliases' where applicable

Context: preparing for AUTO_BUILD_ALIASES=False and deterministic redirect mapping.

Ref: conversation https://chatgpt.com/share/68cd512c-c878-800f-bdf2-81737adf7e0e
2025-09-19 14:51:56 +02:00

48 lines
1.3 KiB
YAML

features:
# If you want to use Matomo on the Matomo page, you
# have to set it here manual to true.
# It's deactivated, because the proxy setup for Matomo
# itself wouldn't be possible
matomo: false
css: false
desktop: false # Didn't work in frame didn't have high priority @todo figure out pcause and solve it
central_database: true
oauth2: false
logout: false # Dependency conflict. It requires CDN and CDN requires matomo
server:
csp:
whitelist:
script-src-elem:
- https://cdn.matomo.cloud
style-src-elem:
- https://fonts.googleapis.com
flags:
script-src:
unsafe-eval: true
script-src-elem:
unsafe-inline: true
unsafe-eval: true
style-src:
unsafe-inline: true
unsafe-eval: true
domains:
canonical:
- "matomo.{{ PRIMARY_DOMAIN }}"
aliases: []
excluded_ips: "{{ networks.internet.values() | list }}"
docker:
services:
matomo:
image: "matomo"
version: "latest"
name: "matomo"
backup:
no_stop_required: true
database:
enabled: true
redis:
enabled: false
volumes:
data: matomo_data