mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-17 15:56:04 +02:00
Kevin Veen-Birkenbach
5bc635109a
oidc.php: autologin/localLogin templated via vars; optionally disable wgPasswordAttemptThrottle when 'web-svc-logout' present vars: set defaults (AUTOLOGIN=true, LOCALLOGIN=false); use path_join/url_join for clean paths/URLs Context: https://chatgpt.com/share/68caaf41-d098-800f-beb0-a473ff08c9c5
54 lines
2.4 KiB
YAML
54 lines
2.4 KiB
YAML
# roles/web-app-mediawiki/tasks/03_patch_settings.yml
|
|
- name: "MEDIAWIKI | Normalize base settings in LocalSettings.php (clean + append once)"
|
|
vars:
|
|
_lsp_path: "{{ MEDIAWIKI_HTML_DIR }}/LocalSettings.php"
|
|
_server_url: "{{ MEDIAWIKI_URL | regex_replace('/+$', '') }}"
|
|
# Pre-escape single quotes for safe insertion into PHP single-quoted strings:
|
|
_server_url_sq: "{{ _server_url | replace(\"'\", \"'\\\\''\") }}"
|
|
_db_name_sq: "{{ database_name | replace(\"'\", \"'\\\\''\") }}"
|
|
_db_user_sq: "{{ database_username | replace(\"'\", \"'\\\\''\") }}"
|
|
_db_pass_sq: "{{ database_password | replace(\"'\", \"'\\\\''\") }}"
|
|
_db_host_sq: "{{ (database_host ~ ':' ~ database_port) | replace(\"'\", \"'\\\\''\") }}"
|
|
_lang_sq: "{{ HOST_LL | replace(\"'\", \"'\\\\''\") }}"
|
|
shell: |
|
|
docker exec -u {{ MEDIAWIKI_USER }} {{ MEDIAWIKI_CONTAINER }} bash -lc '
|
|
set -euo pipefail
|
|
LSP="{{ _lsp_path }}"
|
|
[ -f "$LSP" ] || { echo "ERROR: LocalSettings.php not found."; exit 1; }
|
|
|
|
SERVER='\''{{ _server_url_sq }}'\''
|
|
DBNAME='\''{{ _db_name_sq }}'\''
|
|
DBUSER='\''{{ _db_user_sq }}'\''
|
|
DBPASS='\''{{ _db_pass_sq }}'\''
|
|
DBHOST='\''{{ _db_host_sq }}'\''
|
|
LANG='\''{{ _lang_sq }}'\''
|
|
|
|
tmp="$(mktemp)"; trap "rm -f \"$tmp\"" EXIT
|
|
|
|
# 1) Copy existing file, but drop ALL prior assignments of our managed keys
|
|
grep -Ev "^[[:space:]]*\$(wgServer|wgCanonicalServer|wgDBname|wgDBuser|wgDBpassword|wgDBserver|wgLanguageCode)[[:space:]]*=" "$LSP" > "$tmp" || true
|
|
|
|
# 2) Append ONE clean, authoritative block
|
|
{
|
|
printf "\n\$wgServer = '\''%s'\'';\n" "$SERVER"
|
|
printf "\$wgCanonicalServer = '\''%s'\'';\n" "$SERVER"
|
|
printf "\$wgDBname = '\''%s'\'';\n" "$DBNAME"
|
|
printf "\$wgDBuser = '\''%s'\'';\n" "$DBUSER"
|
|
printf "\$wgDBpassword = '\''%s'\'';\n" "$DBPASS"
|
|
printf "\$wgDBserver = '\''%s'\'';\n" "$DBHOST"
|
|
printf "\$wgLanguageCode = '\''%s'\'';\n" "$LANG"
|
|
} >> "$tmp"
|
|
|
|
# 3) Idempotent write: only replace if content actually changed
|
|
if ! cmp -s "$LSP" "$tmp"; then
|
|
cat "$tmp" > "$LSP"
|
|
echo CHANGED
|
|
fi
|
|
'
|
|
args:
|
|
executable: /bin/bash
|
|
register: mw_lsp_update
|
|
changed_when: "'CHANGED' in (mw_lsp_update.stdout | default(''))"
|
|
failed_when: mw_lsp_update.rc != 0
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|