mirror of
				https://github.com/kevinveenbirkenbach/computer-playbook.git
				synced 2025-11-04 04:08:15 +00:00 
			
		
		
		
	- Normalize domain blocks across apps:
  - Add explicit 'aliases: []' everywhere (no implicit aliases)
  - Standardize canonical subdomains for consistency:
    * Bluesky: web/api under *.bluesky.<PRIMARY_DOMAIN>
    * EspoCRM: espo.crm.<PRIMARY_DOMAIN>
    * Gitea:   tea.git.<PRIMARY_DOMAIN>
    * GitLab:  lab.git.<PRIMARY_DOMAIN>
    * Joomla:  joomla.cms.<PRIMARY_DOMAIN>
    * Magento: magento.shop.<PRIMARY_DOMAIN>
    * OpenProject: open.project.<PRIMARY_DOMAIN>
    * Pretix:  ticket.shop.<PRIMARY_DOMAIN>
    * Taiga:   kanban.project.<PRIMARY_DOMAIN>
  - Remove legacy/duplicate aliases and use empty list instead
  - Fix 'alias' -> 'aliases' where applicable
Context: preparing for AUTO_BUILD_ALIASES=False and deterministic redirect mapping.
Ref: conversation https://chatgpt.com/share/68cd512c-c878-800f-bdf2-81737adf7e0e
		
	
		
			
				
	
	
		
			36 lines
		
	
	
		
			874 B
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			36 lines
		
	
	
		
			874 B
		
	
	
	
		
			YAML
		
	
	
	
	
	
images:
 | 
						|
  friendica:          "friendica:latest"
 | 
						|
features:
 | 
						|
  matomo:             true
 | 
						|
  css:                false # Temporary deactivated
 | 
						|
  desktop:            true
 | 
						|
  oidc:               false # Implementation doesn't work yet
 | 
						|
  central_database:   true
 | 
						|
  ldap:               true
 | 
						|
  oauth2:             false # No special login side which could be protected, use 2FA of Friendica instead
 | 
						|
  logout:             true
 | 
						|
server:
 | 
						|
  domains:
 | 
						|
    canonical:
 | 
						|
      - "social.{{ PRIMARY_DOMAIN }}"
 | 
						|
    aliases: []
 | 
						|
  csp:
 | 
						|
    flags:
 | 
						|
      script-src-elem:
 | 
						|
        unsafe-inline:  true
 | 
						|
      script-src:
 | 
						|
        unsafe-inline:  true
 | 
						|
        unsafe-eval:    true
 | 
						|
      style-src:
 | 
						|
        unsafe-inline:  true
 | 
						|
oauth2_proxy:  
 | 
						|
  application:        "application"
 | 
						|
  port:               "80"
 | 
						|
addons:
 | 
						|
  keycloakpassword: {}
 | 
						|
  ldapauth: {}
 | 
						|
docker:
 | 
						|
  services:
 | 
						|
    database:
 | 
						|
      enabled: true
 |