mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-07 13:48:00 +00:00
Kevin Veen-Birkenbach
c835ca8f2c
- sys-front-inj-all: load web-svc-cdn and web-svc-logout once; reinitialize inj_enabled after services; move run_once block to top; reorder injections. - sys-front-inj-css: move run_once call into 01_core; fix app_style_present default; simplify main. - sys-front-inj-desktop/js/matomo: deactivate per-role run_once blocks; keep utils/run_once where appropriate. - sys-front-inj-logout: switch to files/logout.js + copy; update head_sub mtime lookup; mark set_fact tasks unchanged. - sys-svc-cdn: inline former 01_core tasks into main; ensure shared/vendor dirs and set run_once in guarded block; remove 01_core.yml. Rationale: prevent cascading 'false_condition: run_once_sys_svc_cdn is not defined' skips by setting run-once facts only after the necessary tasks and avoiding parent-scope guards; improves determinism and handler flushing. Conversation: https://chatgpt.com/share/68ecfaa5-94a0-800f-b1b6-2b969074651f
21 lines
753 B
YAML
21 lines
753 B
YAML
- block:
|
|
- include_tasks: 01_deploy.yml
|
|
- include_tasks: utils/run_once.yml
|
|
when: run_once_sys_front_inj_desktop is not defined
|
|
|
|
# --- Build tiny inline initializer (CSP-hashed) ---
|
|
- name: "Load iFrame init code for '{{ application_id }}'"
|
|
set_fact:
|
|
iframe_init_code: "{{ lookup('template','iframe-init_one_liner.js.j2') }}"
|
|
|
|
- name: "Collapse iFrame init code into one-liner for '{{ application_id }}'"
|
|
set_fact:
|
|
iframe_init_code_one_liner: "{{ iframe_init_code | to_one_liner }}"
|
|
|
|
- name: "Append iFrame init CSP hash for '{{ application_id }}'"
|
|
set_fact:
|
|
applications: "{{ applications | append_csp_hash(application_id, iframe_init_code_one_liner) }}"
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
changed_when: false
|
|
|