mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-11-02 19:28:10 +00:00

Files

Kevin Veen-Birkenbach 57d5269b07 CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

- Add CSP3 support for style/script: include -elem and -attr directives
- Base (style-src, script-src) now unions elem/attr (CSP2/Safari fallback)
- Respect explicit base disables (e.g. style-src.unsafe-inline: false)
- Hashes only when 'unsafe-inline' absent in the final base tokens
- Nginx: set CSP only for HTML/worker via header_filter_by_lua_block; drop for subresources
- Remove per-location header_filter; keep body_filter only
- Update app role flags to *-attr where appropriate; extend desktop CSS sources
- Add comprehensive unit tests for union/explicit-disable/no-mirror-back

Ref: https://chatgpt.com/share/68f87a0a-cebc-800f-bb3e-8c8ab4dee8ee

2025-10-22 13:53:06 +02:00

config

CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers

2025-10-22 13:53:06 +02:00

files

Fix: make EspoCRM entrypoint POSIX-compliant and remove illegal 'pipefail' usage

2025-10-11 21:33:07 +02:00

README.md

EspoCRM

Description

Enhance your sales and service processes with EspoCRM, an open-source CRM featuring workflow automation, LDAP/OIDC single sign-on, and a sleek, lightweight UI! 🚀💼

Overview

This Ansible role deploys EspoCRM using Docker. It handles:

MariaDB database provisioning via the sys-svc-rdbms role
Nginx domain setup with WebSocket and reverse-proxy configuration
Environment variable management through Jinja2 templates
Docker Compose orchestration for web, daemon, and websocket services
Automatic OIDC scope configuration within the EspoCRM container

With this role, you'll have a production-ready CRM environment that's secure, scalable, and real-time.

Features

Workflow Automation: Create and manage automated CRM processes with ease 🛠️
LDAP/OIDC SSO: Integrate with corporate identity providers for seamless login 🔐
WebSocket Notifications: Real-time updates via ZeroMQ and WebSockets 🌐
Config via Templates: Fully customizable .env and docker-compose.yml with Jinja2 ⚙️
Health Checks & Logging: Monitor service health and logs with built-in checks and journald 📈
Modular Role Composition: Leverages central roles for database and Nginx, ensuring consistency across deployments 🔄

Further Resources

Credits

Developed and maintained by Kevin Veen-Birkenbach.
Consulting & Coaching Solutions: veen.world 🌟
Part of the Infinito.Nexus Project 📂
License: Infinito.Nexus NonCommercial License ⚖️