Kevin Veen-Birkenbach 14e868a644

Fix OIDC issuer URL concatenation for Mastodon bug ...

- Removed trailing slash in '_oidc_client_issuer_url' to avoid issuer mismatch
- Use '.rstrip('/')' to normalize '_oidc_url'
- Switched to '~' concatenation instead of inline slashes for all OIDC endpoints
- Ensures that Mastodon and other OIDC clients match the issuer from Keycloak discovery

Change motivated by Mastodon issuer mismatch bug (OpenIDConnect::Discovery::DiscoveryFailed).
See related discussion: https://chatgpt.com/share/68a17d3c-c980-800f-934c-d56955b45f81

2025-08-17 09:02:38 +02:00

..

.gitignore

Added new user generation script and optimized mail config

2025-07-02 15:08:42 +02:00

00_general.yml

refactor(dns): unify Cloudflare + Hetzner handling across roles

2025-08-16 21:43:01 +02:00

01_modes.yml

THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs

2025-08-15 15:15:48 +02:00

02_system_email.yml

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

05_maintenace.yml

Renamed backup roles

2025-07-14 19:04:30 +02:00

06_nginx.yml

THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs

2025-08-15 15:15:48 +02:00

07_paths.yml

THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs

2025-08-15 15:15:48 +02:00

08_calendar.yml

Renamed general and mode constants and implemented a check to verify that constants are just defined ones over the whole repository

2025-08-13 19:11:14 +02:00

09_ports.yml

Optimized injection layer on lua base, as replace for nginx replace. Also optimized cloudflare cache deletion(no everytime for cleanup). Still CDN is required for logout mechanism via JS and Nextcloud deploy is buggy after changing from nginx to openresty. Propably some variable overwritte topic. Should be solved tomorrow.

2025-07-24 19:13:13 +02:00

10_networks.yml

Solved bug existed due to difference between mailu domain and hostname difference. also refactored during this to find the bug

2025-08-16 14:29:07 +02:00

11_domains.yml

Big restructuring

2025-05-20 00:13:45 +02:00

12_oidc.yml

Fix OIDC issuer URL concatenation for Mastodon bug

2025-08-17 09:02:38 +02:00

13_ldap.yml

Optimized LDAP_DN_BASE for hostname

2025-08-15 15:31:38 +02:00

14_design.yml

Optimized nginx CSP (prop. leads to problems due to too high restrictions for some roles) and implemented health check for mailer

2025-04-30 17:21:05 +02:00

15_about.yml

Solved bug existed due to difference between mailu domain and hostname difference. also refactored during this to find the bug

2025-08-16 14:29:07 +02:00

16_storage.yml

Restructure and cleaned up in preparation of new backup logic

2025-07-15 23:51:51 +02:00

Todo.md

Different optimations and mig integration. test will fail due to strickter validation checks. need to be cleaned up tomorrow

2025-07-18 20:08:20 +02:00