mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-09 19:57:16 +02:00
Kevin Veen-Birkenbach
4ae3cee36c
• Add tasks/01_core.yml to set applications[application_id].server.csp.whitelist['connect-src'] = LOGOUT_CONNECT_SRC_NEW. • Switch tasks/main.yml to include 01_core.yml (run-once guard preserved). • Update templates/env.j2 to emit LOGOUT_DOMAINS as a comma-separated list. • Rework vars/main.yml: compute LOGOUT_DOMAINS, derive LOGOUT_ORIGINS with WEB_PROTOCOL, read connect-src via the get_app_conf filter, and merge/dedupe (unique). Rationale: ensure CSP allows cross-domain logout requests for all configured services. Conversation: https://chatgpt.com/share/68b5b07d-b208-800f-b6b2-f26934607c8a
31 lines
770 B
YAML
31 lines
770 B
YAML
- name: "Add logout domains to CSP connect-src"
|
|
set_fact:
|
|
applications: >-
|
|
{{
|
|
applications | combine(
|
|
{
|
|
application_id: {
|
|
'server': {
|
|
'csp': {
|
|
'whitelist': {
|
|
'connect-src': LOGOUT_CONNECT_SRC_NEW
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
recursive=True
|
|
)
|
|
}}
|
|
|
|
- name: "load docker, proxy for '{{ application_id }}'"
|
|
include_role:
|
|
name: sys-stk-full-stateless
|
|
|
|
- name: Create symbolic link from .env file to repository
|
|
file:
|
|
src: "{{ docker_compose.files.env }}"
|
|
dest: "{{ [ docker_repository_path, '.env' ] | path_join }}"
|
|
state: link
|
|
|
|
- include_tasks: utils/run_once.yml |