Files
computer-playbook/roles/web-app-mastodon/config/main.yml
Kevin Veen-Birkenbach 4f8ce598a9 Mastodon: allow internal chess host & refactor var names; OpenLDAP: safer get_app_conf
- Add ALLOWED_PRIVATE_ADDRESSES to .env (from svc-db-postgres) to handle 422 Mastodon::PrivateNetworkAddressError
- Switch docker-compose to MASTODON_* variables and align vars/main.yml
- Always run 01_setup.yml during deployment (removed conditional flag)
- OpenLDAP: remove implicit True default on network.local to avoid unintended truthy behavior

Context: chess.infinito.nexus resolved to 192.168.200.30 (private IP) from Mastodon; targeted allowlist unblocks federation lookups.

Ref: https://chat.openai.com/share/REPLACE_WITH_THIS_CONVERSATION_LINK
2025-09-03 21:44:47 +02:00

35 lines
868 B
YAML

single_user_mode: false # Set true for initial setup
features:
matomo: true
css: true
desktop: true
oidc: true
central_database: true
logout: true
server:
domains:
canonical:
- "microblog.{{ PRIMARY_DOMAIN }}"
csp:
whitelist:
frame-src:
- "*"
docker:
services:
redis:
enabled: true
database:
enabled: true
mastodon:
image: "ghcr.io/mastodon/mastodon"
version: latest
backup:
no_stop_required: true
name: "mastodon"
streaming:
image: "ghcr.io/mastodon/mastodon-streaming"
version: latest
name: "mastodon-streaming"
volumes:
data: "mastodon_data"