kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-10 02:38:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
5d42b78b3da8a65a9d377e7634ebcc8f3adcd8c5
computer-playbook/roles
History
Kevin Veen-Birkenbach 5d42b78b3d Nextcloud: extend CSP for Talk & disable keeporsweep 
CSP: add cloud.<PRIMARY_DOMAIN> to connect-src and frame-src (both HTTP and WS) and allow worker-src 'blob:' for web workers used by Talk/Collabora.

Apps: disable keeporsweep (installation no longer possible) and document reason.

Context: https://chatgpt.com/share/68db9f41-16ec-800f-9cdf-7530862f89aa
2025-09-30 11:15:32 +02:00
..
desk-bluray-player
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-chromium
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-copyq
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-docker
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-firefox
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-git
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnome
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnome-caffeine
Refactor CDN and run_once handling
2025-09-01 14:11:36 +02:00
desk-gnome-extensions
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnome-terminal
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnucash
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-jrnl
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-keepassxc
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-libreoffice
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
desk-micro
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-neovim
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-nextcloud
Optimized whitespacing
2025-09-23 00:51:23 +02:00
desk-obs
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-qbittorrent
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-retroarch
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-spotify
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-ssh
Refactor CDN and run_once handling
2025-09-01 14:11:36 +02:00
desk-torbrowser
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-virtualbox
cleanup: remove unused handlers and add integration test for unused handlers
2025-09-02 11:02:30 +02:00
desk-zoom
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-base-devel
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-fakeroot
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-gcc
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-git
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-java
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-locales
Removed whitespaces in templates:
2025-09-22 16:28:57 +02:00
dev-make
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-nodejs
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-npm
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
dev-python-pip
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-python-yaml
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-shell
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-yay
Refactor yay update handling:
2025-09-29 09:16:02 +02:00
docker-compose
Refactor docker compose exec usage
2025-09-26 16:26:17 +02:00
docker-container
Refactor OpenProject role:
2025-09-24 17:22:47 +02:00
drv-epson-multiprinter
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-intel
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-lid-switch
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-non-free
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
gen-hunspell
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
pkgmgr
Refactor: consolidate pkgmgr updates and remove legacy roles
2025-09-06 10:46:39 +02:00
pkgmgr-install
Install swapfile tool correct
2025-09-25 13:16:13 +02:00
svc-ai-ollama
feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names
2025-09-23 21:43:50 +02:00
svc-bkp-loc-2-usb
cleanup: remove unused handlers and add integration test for unused handlers
2025-09-02 11:02:30 +02:00
svc-bkp-rmt-2-loc
Solved service ignore parameter bugs
2025-08-21 21:04:21 +02:00
svc-db-mariadb
feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names
2025-09-23 21:43:50 +02:00
svc-db-memcached
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
svc-db-openldap
Added whitespaces
2025-09-23 00:59:55 +02:00
svc-db-postgres
feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names
2025-09-23 21:43:50 +02:00
svc-db-redis
Mailu/Redis: add explicit service resource limits & clamav_db volume
2025-09-24 13:31:54 +02:00
svc-net-wireguard-core
Solved wireguard name bugs
2025-08-29 13:03:06 +02:00
svc-net-wireguard-firewalled
Refactor systemctl services and timers
2025-08-18 21:22:16 +02:00
svc-net-wireguard-plain
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
svc-opt-keyboard-color
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
svc-opt-ssd-hdd
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
svc-opt-swapfile
Install swapfile tool correct
2025-09-25 13:16:13 +02:00
svc-prx-openresty
Refactor resource configuration:
2025-09-24 09:58:30 +02:00
sys-bkp-provider
Refactor systemctl services and categories due to alarm bugs
2025-08-18 13:35:43 +02:00
sys-bkp-provider-user
Refactor systemctl services and categories due to alarm bugs
2025-08-18 13:35:43 +02:00
sys-cli
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-ctl-alm-compose
Optimized variables
2025-09-12 02:41:33 +02:00
sys-ctl-alm-email
Optimized alarm and system handlers
2025-08-20 15:17:04 +02:00
sys-ctl-alm-telegram
Optimized alarm and system handlers
2025-08-20 15:17:04 +02:00
sys-ctl-bkp-docker-2-loc
Removed deathlock between sys-ctl-bkp-docker-2-loc and sys-ctl-cln-faild-bkps - Timer handles now cleanup exclusively
2025-09-19 11:21:18 +02:00
sys-ctl-cln-anon-volumes
Removed waiting for other services, otherwise it ends up breaking, waiting for hard restart service
2025-08-26 19:23:47 +02:00
sys-ctl-cln-bkps
Removed deathlock and optimized run_once settings for performance
2025-09-11 21:48:56 +02:00
sys-ctl-cln-certs
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
sys-ctl-cln-disc-space
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
sys-ctl-cln-faild-bkps
Removed deathlock between sys-ctl-bkp-docker-2-loc and sys-ctl-cln-faild-bkps - Timer handles now cleanup exclusively
2025-09-19 11:21:18 +02:00
sys-ctl-hlth-btrfs
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-hlth-csp
Surpress flushing of CSP and Webserver health checks during setup because tests will fail if procedures didn't finish
2025-09-11 22:31:24 +02:00
sys-ctl-hlth-disc-space
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
sys-ctl-hlth-docker-container
sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests
2025-09-03 11:24:14 +02:00
sys-ctl-hlth-docker-volumes
sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests
2025-09-03 11:24:14 +02:00
sys-ctl-hlth-journalctl
Activated system_service_suppress_flush for journalctl servic4
2025-08-29 12:26:53 +02:00
sys-ctl-hlth-msmtp
Optimized variables
2025-09-12 02:41:33 +02:00
sys-ctl-hlth-webserver
fix(csp): resolve all CSP-related issues and extend webserver health checks
2025-09-25 18:05:41 +02:00
sys-ctl-mtn-cert-deploy
Solvewd tabulator bug
2025-08-20 05:02:16 +02:00
sys-ctl-mtn-cert-renew
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-ctl-rpr-btrfs-balancer
Refactor systemd handling
2025-09-11 18:24:21 +02:00
sys-ctl-rpr-docker-hard
Optimized more run_once routines for performance
2025-09-11 22:16:42 +02:00
sys-ctl-rpr-docker-soft
Optimized more run_once routines for performance
2025-09-11 22:16:42 +02:00
sys-daemon
Removed refresh systemctl service listener for systemctl daemon
2025-09-11 22:37:16 +02:00
sys-dns-cloudflare-records
Refactor DNS handling and add solo record support
2025-09-19 15:29:11 +02:00
sys-dns-hetzner-rdns
Revert "Removed incorrect flavor cloud for hetzner"
2025-09-12 00:43:46 +02:00
sys-dns-wildcards
Explicit activated async for creating of parent DNS entries
2025-09-20 09:30:16 +02:00
sys-front-inj-all
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-front-inj-css
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-front-inj-desktop
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-front-inj-javascript
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-front-inj-logout
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-front-inj-matomo
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-hostname
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-lock
Solved empty entry bug
2025-08-18 23:54:23 +02:00
sys-postfix
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-service
feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack
2025-09-22 18:40:20 +02:00
sys-stk-back-stateful
Refactor: migrate cmp/* and srv/* roles into sys-stk/* and sys-svc/* namespaces
2025-08-28 22:23:09 +02:00
sys-stk-back-stateless
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
sys-stk-front-base
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
sys-stk-front-proxy
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
sys-stk-full-stateful
feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack
2025-09-22 18:40:20 +02:00
sys-stk-full-stateless
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
sys-stk-semi-stateless
Fix semi-stateless run_once label and load both docker-compose & openresty handlers
2025-09-26 22:09:39 +02:00
sys-sudo
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-svc-cdn
Required to move handler reloading one level higher
2025-09-22 21:07:34 +02:00
sys-svc-certbot
refactor(dns): unify Cloudflare + Hetzner handling across roles
2025-08-16 21:43:01 +02:00
sys-svc-certs
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-svc-cln-domains
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-svc-dns
Refactor DNS handling and add solo record support
2025-09-19 15:29:11 +02:00
sys-svc-docker
Refactor svc-opt-swapfile role: move core logic into 01_core.yml, simplify tasks/main.yml, and integrate swapfile setup into sys-svc-docker/01_core.yml to prevent OOM failures. See https://chatgpt.com/share/68d518f2-ba0c-800f-8a3a-c6b045763ac6
2025-09-25 12:27:13 +02:00
sys-svc-journalctl
Refactor systemctl services and categories due to alarm bugs
2025-08-18 13:35:43 +02:00
sys-svc-letsencrypt
feat(dns): add sys-svc-dns role and extend parent DNS handling
2025-09-11 23:47:27 +02:00
sys-svc-msmtp
Updated sys-svc-msmtp execution condition
2025-08-27 18:12:49 +02:00
sys-svc-proxy
Nextcloud/Talk: add Janus config & fix WebSocket proxying
2025-09-30 11:14:15 +02:00
sys-svc-rdbms
Removed whitespaces in templates:
2025-09-22 16:28:57 +02:00
sys-svc-sshd
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-svc-webserver-core
Nextcloud/Talk: add Janus config & fix WebSocket proxying
2025-09-30 11:14:15 +02:00
sys-svc-webserver-https
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-timer
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
sys-timer-cln-bkps
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
sys-util-csp-cert
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
update-apt
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
update-compose
Refactor yay update handling:
2025-09-29 09:16:02 +02:00
update-pacman
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
user
THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs
2025-08-15 15:15:48 +02:00
user-administrator
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
user-root
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-browser
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-design
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-arduino
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-core
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-java
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-php
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-python
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-shell
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-game-compose
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-game-os
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-game-windows
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-office
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-dev-admin
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-dev-admin-network
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-srv-corporate-identity
Renamed web-app-port-ui to web-app-desktop
2025-08-26 11:35:22 +02:00
web-app-akaunting
Inverted docker_compose_skipp_file_creation to don't use double negation
2025-09-22 13:40:28 +02:00
web-app-baserow
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-bigbluebutton
Deactivated recording for Big Blue Button
2025-09-29 15:23:48 +02:00
web-app-bluesky
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-app-bookwyrm
Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See: https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1
2025-09-20 09:31:49 +02:00
web-app-bridgy-fed
Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See: https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1
2025-09-20 09:31:49 +02:00
web-app-chess
Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See: https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1
2025-09-20 09:31:49 +02:00
web-app-confluence
feat(jvm): add robust JVM sizing filters and apply across Confluence/Jira
2025-09-24 11:29:40 +02:00
web-app-desktop
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-app-discourse
Removed whitespaces in templates:
2025-09-22 16:28:57 +02:00
web-app-elk
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-espocrm
Replaced fixed 'web' service call for exec with 'ESPOCRM_SERVICE' variable for exec call
2025-09-28 15:52:44 +02:00
web-app-flowise
fix(csp): resolve all CSP-related issues and extend webserver health checks
2025-09-25 18:05:41 +02:00
web-app-friendica
Refactor docker compose exec usage
2025-09-26 16:26:17 +02:00
web-app-funkwhale
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-fusiondirectory
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-gitea
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-gitlab
feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names
2025-09-23 21:43:50 +02:00
web-app-jenkins
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-jira
feat(jvm): add robust JVM sizing filters and apply across Confluence/Jira
2025-09-24 11:29:40 +02:00
web-app-joomla
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-keycloak
feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names
2025-09-23 21:43:50 +02:00
web-app-lam
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-listmonk
Refactor docker compose exec usage
2025-09-26 16:26:17 +02:00
web-app-magento
Refactor resource configuration:
2025-09-24 09:58:30 +02:00
web-app-mailu
Refactor docker compose exec usage
2025-09-26 16:26:17 +02:00
web-app-mastodon
mastodon: tighten resources, robust exec tasks, and env defaults
2025-09-24 01:52:18 +02:00
web-app-matomo
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-matrix
Refactor docker compose exec usage
2025-09-26 16:26:17 +02:00
web-app-mediawiki
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-mig
Little optimations
2025-09-22 11:17:31 +02:00
web-app-minio
Added correct minio http statuscodes
2025-09-29 17:29:29 +02:00
web-app-mobilizon
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-moodle
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-navigator
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-nextcloud
Nextcloud: extend CSP for Talk & disable keeporsweep
2025-09-30 11:15:32 +02:00
web-app-oauth2-proxy
Reduced port exposal to local for better encapsulation
2025-09-19 19:43:16 +02:00
web-app-openproject
Refactor docker compose exec usage
2025-09-26 16:26:17 +02:00
web-app-openwebui
Optimized README.md
2025-09-23 13:47:46 +02:00
web-app-peertube
Removed whitespaces in templates:
2025-09-22 16:28:57 +02:00
web-app-pgadmin
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-phpldapadmin
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-phpmyadmin
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-pixelfed
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-postmarks
Add README.md files for web-app-bookwyrm, web-app-postmarks, and web-app-socialhome roles
2025-09-02 11:52:34 +02:00
web-app-pretix
fix(csp): resolve all CSP-related issues and extend webserver health checks
2025-09-25 18:05:41 +02:00
web-app-roulette-wheel
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-snipe-it
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-socialhome
Add README.md files for web-app-bookwyrm, web-app-postmarks, and web-app-socialhome roles
2025-09-02 11:52:34 +02:00
web-app-sphinx
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-syncope
Removed whitespaces in templates:
2025-09-22 16:28:57 +02:00
web-app-taiga
Add healthchecks for all Taiga services, fix RabbitMQ env var names, and define TAIGA_HOSTNAME
2025-09-29 17:09:42 +02:00
web-app-wordpress
Add healthchecks for all Taiga services, fix RabbitMQ env var names, and define TAIGA_HOSTNAME
2025-09-29 17:09:42 +02:00
web-app-xwiki
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-yourls
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-opt-rdr-domains
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
web-opt-rdr-www
Removed leftover
2025-09-26 19:39:38 +02:00
web-svc-asset
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-svc-cdn
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
web-svc-collabora
Override docker conf variables from parents
2025-09-27 02:41:13 +02:00
web-svc-coturn
Solved coturn volume bug
2025-09-29 15:33:50 +02:00
web-svc-file
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
web-svc-html
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
web-svc-legal
Removed whitespaces in templates:
2025-09-22 16:28:57 +02:00
web-svc-libretranslate
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-svc-logout
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-svc-simpleicons
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-svc-xmpp
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
__init__.py
Optimized RBAC via LDAP
2025-07-04 08:03:27 +02:00
.gitignore
Finished optimization for today
2025-03-20 17:00:07 +01:00
categories.yml
feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack
2025-09-22 18:40:20 +02:00
glosar.rst
Added new categories description scheme
2025-07-10 15:36:40 +02:00
index.rst
Optimized roles documentation
2025-07-12 17:52:36 +02:00