mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-09 03:37:37 +02:00
Kevin Veen-Birkenbach
231fd567b3
Introduce sys-svc-cdn (cdn_paths/cdn_urls/cdn_dirs) and ensure CDN directories + latest symlink. Rename sys-srv-web-inj-* → sys-front-inj-*; update includes/templates; serve shared/per-app CSS & JS via CDN. Add lookup_plugins/local_mtime_qs.py for mtime-based cache busting; split CSS into default.css/bootstrap.css + optional per-app style.css. CSP: use style-src-elem; drop unsafe-inline for styles. Services: fix SYS_SERVICE_ALL_ENABLED bool and controlled flush. BREAKING CHANGE: role names changed; replace includes and references accordingly. Conversation: https://chatgpt.com/share/68b55494-9ec4-800f-b559-44707029141d
49 lines
1.6 KiB
YAML
49 lines
1.6 KiB
YAML
- name: Build inj_enabled
|
|
set_fact:
|
|
inj_enabled: "{{ applications | inj_enabled(application_id, SRV_WEB_INJ_COMP_FEATURES_ALL) }}"
|
|
|
|
- name: "Load CDN Service for '{{ domain }}'"
|
|
include_role:
|
|
name: sys-svc-cdn
|
|
public: true # Expose variables so that they can be used in all injection roles
|
|
|
|
- name: Reinitialize 'inj_enabled' for '{{ domain }}', after modification by CDN
|
|
set_fact:
|
|
inj_enabled: "{{ applications | inj_enabled(application_id, SRV_WEB_INJ_COMP_FEATURES_ALL) }}"
|
|
inj_head_features: "{{ SRV_WEB_INJ_COMP_FEATURES_ALL | inj_features('head') }}"
|
|
inj_body_features: "{{ SRV_WEB_INJ_COMP_FEATURES_ALL | inj_features('body') }}"
|
|
|
|
- name: "Activate Desktop iFrame notifier for '{{ domain }}'"
|
|
include_role:
|
|
name: sys-front-inj-desktop
|
|
public: true # Vars used in templates
|
|
when: inj_enabled.desktop
|
|
|
|
- name: "Activate Corporate CSS for '{{ domain }}'"
|
|
include_role:
|
|
name: sys-front-inj-css
|
|
when: inj_enabled.css
|
|
|
|
- name: "Activate Matomo Tracking for '{{ domain }}'"
|
|
include_role:
|
|
name: sys-front-inj-matomo
|
|
when: inj_enabled.matomo
|
|
|
|
- name: "Activate Javascript for '{{ domain }}'"
|
|
include_role:
|
|
name: sys-front-inj-javascript
|
|
when: inj_enabled.javascript
|
|
|
|
- name: "Activate logout proxy for '{{ domain }}'"
|
|
include_role:
|
|
name: sys-front-inj-logout
|
|
public: true # Vars used in templates
|
|
when: inj_enabled.logout
|
|
|
|
- block:
|
|
- name: Include dependency 'srv-core'
|
|
include_role:
|
|
name: srv-core
|
|
when: run_once_srv_core is not defined
|
|
- include_tasks: utils/run_once.yml
|
|
when: run_once_sys_front_inj_all is not defined |