kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-12-02 15:39:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3fe83f26d524cbfaff3abd809dbe3534b95c60ed
computer-playbook/roles
History
Kevin Veen-Birkenbach 3fe83f26d5 SuiteCRM: Implement and activate full LDAP authentication support 
- Removed legacy SugarCRM LDAP config generation
- Implemented Symfony/SuiteCRM 8 native LDAP ENV configuration
- Added auto-creation provider settings
- Added trusted proxy + host configuration for correct HTTPS handling
- Added automatic domain-based TRUSTED_HOSTS generation
- Ensured cache is cleared/warmed up on container start
- Verified LDAP authentication now works as expected

Conversation reference: https://chatgpt.com/share/69281db4-4ff4-800f-8577-77e20120e09a
2025-11-27 10:46:32 +01:00
..
desk-bluray-player
…
desk-chromium
…
desk-copyq
…
desk-docker
…
desk-firefox
…
desk-git
…
desk-gnome
…
desk-gnome-caffeine
…
desk-gnome-extensions
…
desk-gnome-terminal
…
desk-gnucash
…
desk-jrnl
…
desk-keepassxc
…
desk-libreoffice
…
desk-micro
…
desk-neovim
…
desk-nextcloud
…
desk-obs
…
desk-qbittorrent
…
desk-retroarch
…
desk-spotify
…
desk-ssh
…
desk-torbrowser
…
desk-virtualbox
…
desk-zoom
…
dev-base-devel
…
dev-fakeroot
…
dev-gcc
…
dev-git
…
dev-java
…
dev-locales
Added setting of timezone
2025-10-15 02:24:25 +02:00
dev-make
…
dev-nodejs
…
dev-npm
…
dev-python-pip
…
dev-python-yaml
…
dev-shell
…
dev-yay
Refactor yay update handling:
2025-09-29 09:16:02 +02:00
docker-compose
Solved multiple MIG bugs
2025-11-26 01:16:22 +01:00
docker-container
Add reusable HTTP healthcheck template and integrate into Shopware and Taiga roles
2025-11-02 22:26:42 +01:00
drv-epson-multiprinter
…
drv-intel
…
drv-lid-switch
…
drv-non-free
…
gen-hunspell
…
pkgmgr
…
pkgmgr-install
…
svc-ai-ollama
…
svc-bkp-loc-2-usb
…
svc-bkp-rmt-2-loc
svc-bkp-rmt-2-loc: migrate pull script to Python + add unit tests; lock down backup-provider ACLs
2025-10-14 20:10:49 +02:00
svc-db-mariadb
…
svc-db-memcached
…
svc-db-openldap
Optimize OpenLDAP container resources for up to 5k users (1.25 CPU / 1.5GB RAM / 1024 PIDs). See https://chatgpt.com/share/68ef7228-4028-800f-8986-54206a51b9c1
2025-10-15 12:06:51 +02:00
svc-db-postgres
feat(shopware): migrate to single Shopware base image and split services (web/worker/scheduler/init)
2025-11-03 01:51:38 +01:00
svc-db-redis
Refactor JVM memory filters, add Redis sizing and Docker cleanup service
2025-11-25 15:50:27 +01:00
svc-net-wireguard-core
…
svc-net-wireguard-firewalled
…
svc-net-wireguard-plain
…
svc-opt-keyboard-color
…
svc-opt-ssd-hdd
…
svc-opt-swapfile
…
svc-prx-openresty
…
sys-bkp-provider
…
sys-bkp-provider-user
Deactivated change when because its anyhow not trackable
2025-10-15 10:27:12 +02:00
sys-cli
…
sys-ctl-alm-compose
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-alm-email
Mailu/MSMTP: split token mgmt, idempotent reload, safer guards
2025-10-12 18:05:00 +02:00
sys-ctl-alm-telegram
…
sys-ctl-bkp-docker-2-loc
Add system_service_suppress_flush to complement force_flush logic for backup to local
2025-11-25 19:17:53 +01:00
sys-ctl-cln-anon-volumes
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-cln-bkps
Optimized variable whitespacing
2025-10-12 14:37:45 +02:00
sys-ctl-cln-certs
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-cln-disc-space
Refactor JVM memory filters, add Redis sizing and Docker cleanup service
2025-11-25 15:50:27 +01:00
sys-ctl-cln-docker
Refactor JVM memory filters, add Redis sizing and Docker cleanup service
2025-11-25 15:50:27 +01:00
sys-ctl-cln-faild-bkps
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-hlth-btrfs
…
sys-ctl-hlth-csp
fix(sys-ctl-hlth-csp): ensure '--' separator is added when passing ignore list to checkcsp
2025-10-03 20:50:49 +02:00
sys-ctl-hlth-disc-space
Refactor JVM memory filters, add Redis sizing and Docker cleanup service
2025-11-25 15:50:27 +01:00
sys-ctl-hlth-docker-container
…
sys-ctl-hlth-docker-volumes
…
sys-ctl-hlth-journalctl
…
sys-ctl-hlth-msmtp
…
sys-ctl-hlth-webserver
…
sys-ctl-mtn-cert-deploy
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-mtn-cert-renew
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-rpr-btrfs-balancer
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-rpr-docker-hard
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-rpr-docker-soft
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-daemon
…
sys-dns-cloudflare-records
…
sys-dns-hetzner-rdns
…
sys-dns-wildcards
…
sys-front-inj-all
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
sys-front-inj-css
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
sys-front-inj-desktop
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-front-inj-javascript
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-front-inj-logout
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-front-inj-matomo
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-hostname
…
sys-lock
…
sys-postfix
…
sys-service
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-stk-back-stateful
…
sys-stk-back-stateless
…
sys-stk-front-base
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
sys-stk-front-proxy
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
sys-stk-full-stateful
…
sys-stk-full-stateless
…
sys-stk-semi-stateless
Fix semi-stateless run_once label and load both docker-compose & openresty handlers
2025-09-26 22:09:39 +02:00
sys-sudo
…
sys-svc-cdn
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-svc-certbot
…
sys-svc-certs
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-svc-cln-domains
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-svc-dns
…
sys-svc-docker
Refactor JVM memory filters, add Redis sizing and Docker cleanup service
2025-11-25 15:50:27 +01:00
sys-svc-journalctl
…
sys-svc-letsencrypt
optimized for easier debugging
2025-10-25 12:52:17 +02:00
sys-svc-msmtp
Mailu/MSMTP: split token mgmt, idempotent reload, safer guards
2025-10-12 18:05:00 +02:00
sys-svc-proxy
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
sys-svc-rdbms
…
sys-svc-sshd
Optimize SSH connection performance by disabling GSSAPI authentication and reverse DNS lookups
2025-10-15 18:37:09 +02:00
sys-svc-webserver-core
Nextcloud/Talk: add Janus config & fix WebSocket proxying
2025-09-30 11:14:15 +02:00
sys-svc-webserver-https
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-timer
…
sys-timer-cln-bkps
…
sys-util-csp-cert
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
update-apt
…
update-compose
Refactor yay update handling:
2025-09-29 09:16:02 +02:00
update-pacman
…
user
Set MODE_CLEANUP default true and solved tld localhost user name bug
2025-10-12 01:15:52 +02:00
user-administrator
…
user-root
…
util-desk-browser
…
util-desk-design
…
util-desk-dev-arduino
…
util-desk-dev-core
…
util-desk-dev-java
…
util-desk-dev-php
…
util-desk-dev-python
…
util-desk-dev-shell
…
util-desk-game-compose
…
util-desk-game-os
…
util-desk-game-windows
…
util-desk-office
…
util-dev-admin
…
util-dev-admin-network
…
util-srv-corporate-identity
…
web-app-akaunting
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-baserow
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-bigbluebutton
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-bluesky
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-app-bookwyrm
Optimized CSS
2025-11-26 14:27:42 +01:00
web-app-bridgy-fed
…
web-app-chess
…
web-app-confluence
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-desktop
Optimized code
2025-11-05 20:46:33 +01:00
web-app-discourse
Optimized CSS
2025-11-26 14:27:42 +01:00
web-app-elk
…
web-app-espocrm
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-flowise
…
web-app-friendica
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-funkwhale
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-fusiondirectory
…
web-app-gitea
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-gitlab
Optimized CSP for Gitlab
2025-10-28 08:26:53 +01:00
web-app-jenkins
…
web-app-jira
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-joomla
Joomla: Add upload-size support, introduce php-upload.ini, refactor task numbering, update Docker Compose and override logout client_max_body_size
2025-11-26 14:59:51 +01:00
web-app-keycloak
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
web-app-lam
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
web-app-listmonk
Fix Listmonk bounce mailbox: switch from SMTP port to POP3 port 995 for correct bounce processing.
2025-11-26 14:35:52 +01:00
web-app-magento
…
web-app-mailu
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
web-app-mastodon
Fix Mastodon role: run DB migrations before health checks, restructure setup/wait tasks, introduce service name variables, and update docker-compose templates.
2025-11-25 18:34:11 +01:00
web-app-matomo
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-matrix
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-mediawiki
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
web-app-mig
Add cleanup task for MIG roles directory and restructure build_data tasks
2025-11-26 19:13:40 +01:00
web-app-mini-qr
Added z.clarity.ms to mini-qr
2025-11-07 00:18:01 +01:00
web-app-minio
Added correct minio http statuscodes
2025-09-29 17:29:29 +02:00
web-app-mobilizon
Optimized CSS
2025-11-26 14:27:42 +01:00
web-app-moodle
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-navigator
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-nextcloud
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
web-app-oauth2-proxy
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-openproject
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
web-app-openwebui
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-peertube
feat(filters): enforce safe Node.js heap sizing via reusable filter
2025-11-07 15:39:54 +01:00
web-app-pgadmin
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-phpldapadmin
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-phpmyadmin
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-pixelfed
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-postmarks
…
web-app-pretix
…
web-app-roulette-wheel
…
web-app-shopware
Implemented CLI installer draft and replaced OIDC by OAuth2 Proxy for SuiteCRM - See https://chatgpt.com/share/69274924-9dec-800f-8653-345aa2c25664
2025-11-27 01:10:11 +01:00
web-app-snipe-it
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-app-socialhome
…
web-app-sphinx
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-suitecrm
SuiteCRM: Implement and activate full LDAP authentication support
2025-11-27 10:46:32 +01:00
web-app-syncope
…
web-app-taiga
Introduce deterministic CSS gradient angle and shared color palette facts
2025-11-27 10:44:01 +01:00
web-app-wordpress
Made /etc/msmtprc volume for wordpress read only
2025-11-26 14:36:40 +01:00
web-app-xwiki
Refactor XWiki OIDC activation to use REST-based authenticationService update (reliable alternative to Groovy) — see ChatGPT discussion: https://chatgpt.com/share/69005d88-6bf8-800f-af41-73b0e5dc9c13
2025-10-29 11:12:19 +01:00
web-app-yourls
Refactored OAuth2 Proxy and PhpLDAPAdmin
2025-11-27 00:21:22 +01:00
web-opt-rdr-domains
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
web-opt-rdr-www
Removed leftover
2025-09-26 19:39:38 +02:00
web-svc-asset
…
web-svc-cdn
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-collabora
Add full ONLYOFFICE integration:
2025-11-21 21:36:27 +01:00
web-svc-coturn
Solved coturn volume bug
2025-09-29 15:33:50 +02:00
web-svc-file
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-html
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-legal
Optimized path building
2025-09-30 16:36:28 +02:00
web-svc-libretranslate
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-svc-logout
Joomla: Add upload-size support, introduce php-upload.ini, refactor task numbering, update Docker Compose and override logout client_max_body_size
2025-11-26 14:59:51 +01:00
web-svc-onlyoffice
Added the correct http status code for mini-qr
2025-11-26 17:00:46 +01:00
web-svc-simpleicons
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-xmpp
…
__init__.py
…
.gitignore
…
categories.yml
Solved rmt backup bugs
2025-10-14 16:29:42 +02:00
glosar.rst
…
index.rst
…