kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-11-27 07:06:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
5ef525eac9ffafd9d5edff7912199d24d96d86c2
computer-playbook/roles
History
Kevin Veen-Birkenbach 5ef525eac9 Optimized CSP for Gitlab
2025-10-28 08:26:53 +01:00
..
desk-bluray-player
…
desk-chromium
…
desk-copyq
…
desk-docker
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-firefox
…
desk-git
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnome
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnome-caffeine
…
desk-gnome-extensions
…
desk-gnome-terminal
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnucash
…
desk-jrnl
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-keepassxc
…
desk-libreoffice
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
desk-micro
…
desk-neovim
…
desk-nextcloud
Optimized whitespacing
2025-09-23 00:51:23 +02:00
desk-obs
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-qbittorrent
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-retroarch
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-spotify
…
desk-ssh
Refactor CDN and run_once handling
2025-09-01 14:11:36 +02:00
desk-torbrowser
…
desk-virtualbox
…
desk-zoom
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-base-devel
…
dev-fakeroot
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-gcc
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-git
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-java
…
dev-locales
…
dev-make
…
dev-nodejs
…
dev-npm
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
dev-python-pip
…
dev-python-yaml
…
dev-shell
…
dev-yay
…
docker-compose
…
docker-container
Refactor OpenProject role:
2025-09-24 17:22:47 +02:00
drv-epson-multiprinter
…
drv-intel
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-lid-switch
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-non-free
…
gen-hunspell
…
pkgmgr
Refactor: consolidate pkgmgr updates and remove legacy roles
2025-09-06 10:46:39 +02:00
pkgmgr-install
…
svc-ai-ollama
feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names
2025-09-23 21:43:50 +02:00
svc-bkp-loc-2-usb
…
svc-bkp-rmt-2-loc
svc-bkp-rmt-2-loc: migrate pull script to Python + add unit tests; lock down backup-provider ACLs
2025-10-14 20:10:49 +02:00
svc-db-mariadb
…
svc-db-memcached
…
svc-db-openldap
…
svc-db-postgres
fix(svc-db-postgres): pin Postgres version to 17-3.5, add entity_name var, and dynamically resolve major version for dev package
2025-10-02 11:07:17 +02:00
svc-db-redis
…
svc-net-wireguard-core
Solved wireguard name bugs
2025-08-29 13:03:06 +02:00
svc-net-wireguard-firewalled
…
svc-net-wireguard-plain
…
svc-opt-keyboard-color
…
svc-opt-ssd-hdd
…
svc-opt-swapfile
Install swapfile tool correct
2025-09-25 13:16:13 +02:00
svc-prx-openresty
Refactor resource configuration:
2025-09-24 09:58:30 +02:00
sys-bkp-provider
…
sys-bkp-provider-user
…
sys-cli
…
sys-ctl-alm-compose
…
sys-ctl-alm-email
…
sys-ctl-alm-telegram
Optimized alarm and system handlers
2025-08-20 15:17:04 +02:00
sys-ctl-bkp-docker-2-loc
Refactor BigBlueButton and backup task structure:
2025-10-17 12:14:39 +02:00
sys-ctl-cln-anon-volumes
…
sys-ctl-cln-bkps
…
sys-ctl-cln-certs
…
sys-ctl-cln-disc-space
…
sys-ctl-cln-faild-bkps
…
sys-ctl-hlth-btrfs
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-hlth-csp
fix(sys-ctl-hlth-csp): ensure '--' separator is added when passing ignore list to checkcsp
2025-10-03 20:50:49 +02:00
sys-ctl-hlth-disc-space
…
sys-ctl-hlth-docker-container
…
sys-ctl-hlth-docker-volumes
…
sys-ctl-hlth-journalctl
…
sys-ctl-hlth-msmtp
…
sys-ctl-hlth-webserver
…
sys-ctl-mtn-cert-deploy
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-mtn-cert-renew
…
sys-ctl-rpr-btrfs-balancer
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-ctl-rpr-docker-hard
…
sys-ctl-rpr-docker-soft
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-daemon
…
sys-dns-cloudflare-records
…
sys-dns-hetzner-rdns
…
sys-dns-wildcards
…
sys-front-inj-all
…
sys-front-inj-css
…
sys-front-inj-desktop
…
sys-front-inj-javascript
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-front-inj-logout
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-front-inj-matomo
…
sys-hostname
…
sys-lock
…
sys-postfix
…
sys-service
…
sys-stk-back-stateful
…
sys-stk-back-stateless
…
sys-stk-front-base
…
sys-stk-front-proxy
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
sys-stk-full-stateful
…
sys-stk-full-stateless
…
sys-stk-semi-stateless
…
sys-sudo
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-svc-cdn
refactor(front-injection): stabilize run_once flow and explicit web-service loading
2025-10-13 15:12:23 +02:00
sys-svc-certbot
…
sys-svc-certs
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-svc-cln-domains
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-svc-dns
Refactor DNS handling and add solo record support
2025-09-19 15:29:11 +02:00
sys-svc-docker
infra(sys-service): centralize async control + pre-deploy backup safeguard
2025-10-02 11:58:23 +02:00
sys-svc-journalctl
Refactor systemctl services and categories due to alarm bugs
2025-08-18 13:35:43 +02:00
sys-svc-letsencrypt
…
sys-svc-msmtp
…
sys-svc-proxy
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
sys-svc-rdbms
Removed whitespaces in templates:
2025-09-22 16:28:57 +02:00
sys-svc-sshd
…
sys-svc-webserver-core
…
sys-svc-webserver-https
…
sys-timer
…
sys-timer-cln-bkps
…
sys-util-csp-cert
…
update-apt
…
update-compose
…
update-pacman
…
user
…
user-administrator
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
user-root
…
util-desk-browser
…
util-desk-design
…
util-desk-dev-arduino
…
util-desk-dev-core
…
util-desk-dev-java
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-php
…
util-desk-dev-python
…
util-desk-dev-shell
…
util-desk-game-compose
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-game-os
…
util-desk-game-windows
…
util-desk-office
…
util-dev-admin
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-dev-admin-network
…
util-srv-corporate-identity
Renamed web-app-port-ui to web-app-desktop
2025-08-26 11:35:22 +02:00
web-app-akaunting
…
web-app-baserow
…
web-app-bigbluebutton
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-bluesky
…
web-app-bookwyrm
…
web-app-bridgy-fed
…
web-app-chess
…
web-app-confluence
…
web-app-desktop
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-discourse
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-elk
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-espocrm
…
web-app-flowise
…
web-app-friendica
Used path_join @ web-app-friendica
2025-10-26 15:48:28 +01:00
web-app-funkwhale
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-fusiondirectory
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-gitea
…
web-app-gitlab
…
web-app-jenkins
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-jira
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-joomla
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-keycloak
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-lam
…
web-app-listmonk
Refactor docker compose exec usage
2025-09-26 16:26:17 +02:00
web-app-magento
Refactor resource configuration:
2025-09-24 09:58:30 +02:00
web-app-mailu
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-mastodon
Added cleanup to mastodon
2025-10-12 14:03:28 +02:00
web-app-matomo
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-matrix
…
web-app-mediawiki
…
web-app-mig
…
web-app-mini-qr
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-minio
…
web-app-mobilizon
…
web-app-moodle
…
web-app-navigator
…
web-app-nextcloud
CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
2025-10-22 13:53:06 +02:00
web-app-oauth2-proxy
Add basic healthcheck to oauth2-proxy container template using binary version check for distroless compatibility
2025-10-18 10:52:58 +02:00
web-app-openproject
…
web-app-openwebui
…
web-app-peertube
…
web-app-pgadmin
…
web-app-phpldapadmin
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-phpmyadmin
…
web-app-pixelfed
…
web-app-postmarks
…
web-app-pretix
…
web-app-roulette-wheel
…
web-app-snipe-it
…
web-app-socialhome
…
web-app-sphinx
…
web-app-syncope
…
web-app-taiga
…
web-app-wordpress
…
web-app-xwiki
…
web-app-yourls
…
web-opt-rdr-domains
…
web-opt-rdr-www
…
web-svc-asset
…
web-svc-cdn
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-collabora
…
web-svc-coturn
…
web-svc-file
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-html
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-legal
…
web-svc-libretranslate
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-svc-logout
…
web-svc-simpleicons
…
web-svc-xmpp
…
__init__.py
Optimized RBAC via LDAP
2025-07-04 08:03:27 +02:00
.gitignore
Finished optimization for today
2025-03-20 17:00:07 +01:00
categories.yml
…
glosar.rst
Added new categories description scheme
2025-07-10 15:36:40 +02:00
index.rst
Optimized roles documentation
2025-07-12 17:52:36 +02:00