mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-08 06:08:05 +00:00
Kevin Veen-Birkenbach
493d5bbbda
- added new file roles/web-app-shopware/files/framework.yaml defining trusted_proxies and trusted_headers for Symfony - mounted framework.yaml into /var/www/html/config/packages/ in docker-compose - exposed new role vars SHOPWARE_FRAMEWORK_HOST/DOCKER for mounting path - rendered framework.yaml via Ansible copy task with proper permissions - adjusted env.j2 to set TRUSTED_PROXIES and TRUSTED_HOSTS dynamically from domains and networks - added SHOPWARE_DOMAIN var to vars/main.yml - removed inline framework.yaml creation from Dockerfile (now managed via mount) - updated proxy template (html.conf.j2) to include X-Forwarded-Ssl header - improved init.sh permission handling for shared volumes See ChatGPT conversation for implementation details and rationale: https://chatgpt.com/share/690d4fe7-2830-800f-8b6d-b868e7fe0e97
37 lines
1.3 KiB
Django/Jinja
37 lines
1.3 KiB
Django/Jinja
# DOMAIN/URL
|
|
DOMAIN={{ SHOPWARE_DOMAIN }}
|
|
APP_URL="{{ domains | get_url(application_id, WEB_PROTOCOL) }}"
|
|
APP_DEBUG="{{ MODE_DEBUG | ternary(1, 0) }}"
|
|
|
|
# Shopware
|
|
APP_ENV={{ 'dev' if (ENVIRONMENT | lower) == 'development' else 'prod' }}
|
|
INSTANCE_ID={{ application_id }}
|
|
|
|
# Proxy
|
|
TRUSTED_PROXIES="{{ networks.internet.values() | select | join(',') }},127.0.0.1,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"
|
|
TRUSTED_HOSTS="{{ SHOPWARE_DOMAIN }}"
|
|
|
|
# Database
|
|
DATABASE_URL="mysql://{{ database_username }}:{{ database_password }}@{{ database_host }}:{{ database_port }}/{{ database_name }}"
|
|
|
|
# Redis (optional)
|
|
{% if SHOPWARE_REDIS_ENABLED | bool %}
|
|
REDIS_URL="redis://{{ SHOPWARE_REDIS_ADDRESS }}/0"
|
|
CACHE_URL="redis://{{ SHOPWARE_REDIS_ADDRESS }}/1"
|
|
MESSENGER_TRANSPORT_DSN="redis://{{ SHOPWARE_REDIS_ADDRESS }}/2"
|
|
{% else %}
|
|
CACHE_URL="file://cache"
|
|
{% endif %}
|
|
|
|
{% if SHOPWARE_OPENSEARCH_ENABLED %}
|
|
# Search
|
|
ELASTICSEARCH_URL="http://opensearch:{{ SHOPWARE_OPENSEARCH_PORT }}"
|
|
OPENSEARCH_URL="http://opensearch:{{ SHOPWARE_OPENSEARCH_PORT }}"
|
|
OPENSEARCH_HOST="opensearch"
|
|
OPENSEARCH_PORT_NUMBER="{{ SHOPWARE_OPENSEARCH_PORT }}"
|
|
OPENSEARCH_INITIAL_ADMIN_PASSWORD="{{ users.administrator.password }}"
|
|
{% endif %}
|
|
|
|
# Mail (Mailu)
|
|
MAILER_DSN="smtps://{{ users['no-reply'].email }}:{{ users['no-reply'].mailu_token }}@{{ SYSTEM_EMAIL.HOST }}:{{ SYSTEM_EMAIL.PORT }}"
|