kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-31 18:29:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
6418a462ecdf531d704492eaecbbeb30478df28d
computer-playbook/roles
History
Kevin Veen-Birkenbach 6418a462ec XWiki: LDAP/OIDC admin mapping, config mounts, and REST installs 
- LDAP: move settings to xwiki.cfg; enable trylocal (1/0), group_mapping to XWiki.XWikiAdminGroup,
  and mode_group_sync=always.
- OIDC: add groups claim request (oidc.userinfoclaims), map provider group to XWiki.XWikiAdminGroup,
  and use space-separated scopes.
- Compose: mount xwiki.cfg and xwiki.properties into /usr/local/xwiki.
- Extensions: wait for REST readiness; pre-check OIDC/LDAP extensions (URL-encoded IDs);
  install via REST job only if missing.
- Vars: strict mappings to LDAP.* and OIDC.* (no defaults), add XWIKI_ADMIN_GROUP and derived DNs.
- Config: expose ldap.local_enabled; tidy meta tags; README grammar update.

Conversation: https://chatgpt.com/share/68c2b8ad-4814-800f-b377-065f967998db
2025-09-11 13:55:53 +02:00
..
desk-bluray-player
…
desk-chromium
…
desk-copyq
…
desk-docker
…
desk-firefox
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-git
…
desk-gnome
…
desk-gnome-caffeine
Refactor CDN and run_once handling
2025-09-01 14:11:36 +02:00
desk-gnome-extensions
…
desk-gnome-terminal
…
desk-gnucash
…
desk-jrnl
…
desk-keepassxc
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-libreoffice
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
desk-micro
…
desk-neovim
…
desk-nextcloud
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
desk-obs
…
desk-qbittorrent
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-retroarch
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-spotify
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-ssh
Refactor CDN and run_once handling
2025-09-01 14:11:36 +02:00
desk-torbrowser
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-virtualbox
cleanup: remove unused handlers and add integration test for unused handlers
2025-09-02 11:02:30 +02:00
desk-zoom
…
dev-base-devel
…
dev-fakeroot
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-gcc
…
dev-git
…
dev-java
…
dev-locales
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
dev-make
…
dev-nodejs
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-npm
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
dev-python-pip
…
dev-python-yaml
…
dev-shell
…
dev-yay
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
docker-compose
Fix Confluence & BookWyrm setup:
2025-09-02 22:49:02 +02:00
docker-container
Nextcloud: integrate Talk & Whiteboard; adjust ports & healthchecks
2025-09-02 00:13:23 +02:00
drv-epson-multiprinter
…
drv-intel
…
drv-lid-switch
…
drv-non-free
…
gen-hunspell
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
pkgmgr
Optimized pkgmgr variables and removed 'Ensure main.py is executable' because it should be preset by repositories itself
2025-08-29 10:53:36 +02:00
pkgmgr-install
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
svc-bkp-loc-2-usb
cleanup: remove unused handlers and add integration test for unused handlers
2025-09-02 11:02:30 +02:00
svc-bkp-rmt-2-loc
…
svc-db-mariadb
…
svc-db-memcached
…
svc-db-openldap
Mastodon: allow internal chess host & refactor var names; OpenLDAP: safer get_app_conf
2025-09-03 21:44:47 +02:00
svc-db-postgres
Implement filter checks: ensure all defined filters are used and remove dead code
2025-09-01 11:47:51 +02:00
svc-db-redis
…
svc-net-wireguard-core
Solved wireguard name bugs
2025-08-29 13:03:06 +02:00
svc-net-wireguard-firewalled
…
svc-net-wireguard-plain
…
svc-opt-keyboard-color
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
svc-opt-ssd-hdd
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
svc-opt-swapfile
Refactor systemctl services and categories due to alarm bugs
2025-08-18 13:35:43 +02:00
svc-prx-openresty
Fix Confluence & BookWyrm setup:
2025-09-02 22:49:02 +02:00
sys-bkp-provider
…
sys-bkp-provider-user
Refactor systemctl services and categories due to alarm bugs
2025-08-18 13:35:43 +02:00
sys-cli
…
sys-ctl-alm-compose
…
sys-ctl-alm-email
…
sys-ctl-alm-telegram
Optimized alarm and system handlers
2025-08-20 15:17:04 +02:00
sys-ctl-bkp-docker-2-loc
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
sys-ctl-cln-anon-volumes
…
sys-ctl-cln-bkps
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
sys-ctl-cln-certs
…
sys-ctl-cln-disc-space
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
sys-ctl-cln-faild-bkps
Fix: Resolved Discourse plugin bug and unified variable/path handling
2025-08-29 20:53:36 +02:00
sys-ctl-hlth-btrfs
…
sys-ctl-hlth-csp
Implement dynamic TimeoutStartSec filter for domains and update roles
2025-08-29 15:44:31 +02:00
sys-ctl-hlth-disc-space
feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup
2025-09-10 17:24:56 +02:00
sys-ctl-hlth-docker-container
sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests
2025-09-03 11:24:14 +02:00
sys-ctl-hlth-docker-volumes
sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests
2025-09-03 11:24:14 +02:00
sys-ctl-hlth-journalctl
Activated system_service_suppress_flush for journalctl servic4
2025-08-29 12:26:53 +02:00
sys-ctl-hlth-msmtp
…
sys-ctl-hlth-webserver
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
sys-ctl-mtn-cert-deploy
…
sys-ctl-mtn-cert-renew
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-ctl-rpr-btrfs-balancer
…
sys-ctl-rpr-docker-hard
refactor(schedule): unify service timeouts, rename 08_timer.yml → 08_schedule.yml, fix docker repair/update timeouts, raise WP upload limit
2025-08-29 19:09:28 +02:00
sys-ctl-rpr-docker-soft
sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests
2025-09-03 11:24:14 +02:00
sys-daemon
…
sys-dns-cloudflare-records
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
sys-dns-hetzner-rdns
…
sys-front-inj-all
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-front-inj-css
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-front-inj-desktop
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-front-inj-javascript
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-front-inj-logout
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-front-inj-matomo
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-hostname
…
sys-lock
…
sys-postfix
…
sys-service
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
sys-stk-back-stateful
…
sys-stk-back-stateless
…
sys-stk-front-proxy
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-stk-front-pure
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-stk-full-stateful
Refactor role naming for TLS and proxy stack
2025-08-29 14:38:20 +02:00
sys-stk-full-stateless
Refactor role naming for TLS and proxy stack
2025-08-29 14:38:20 +02:00
sys-sudo
…
sys-svc-cdn
Refactor CDN and run_once handling
2025-09-01 14:11:36 +02:00
sys-svc-certbot
…
sys-svc-certs
Improve SAN certbundle task logic and messages
2025-08-29 16:45:03 +02:00
sys-svc-cln-domains
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-svc-directory-validator
…
sys-svc-docker
sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests
2025-09-03 11:24:14 +02:00
sys-svc-journalctl
…
sys-svc-letsencrypt
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-svc-msmtp
…
sys-svc-proxy
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-svc-rdbms
changed database_user to database_username
2025-09-04 12:45:22 +02:00
sys-svc-sshd
…
sys-svc-webserver
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
sys-timer
…
sys-timer-cln-bkps
…
sys-util-csp-cert
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
update-apt
…
update-compose
…
update-docker
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
update-pacman
…
update-pip
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
update-pkgmgr
…
update-yay
…
user
…
user-administrator
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
user-root
…
util-desk-browser
…
util-desk-design
…
util-desk-dev-arduino
…
util-desk-dev-core
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-java
…
util-desk-dev-php
…
util-desk-dev-python
…
util-desk-dev-shell
…
util-desk-game-compose
…
util-desk-game-os
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-game-windows
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-office
…
util-dev-admin
…
util-dev-admin-network
…
util-srv-corporate-identity
…
web-app-akaunting
Added docker_volume_path filter_plugin
2025-09-04 11:49:40 +02:00
web-app-baserow
…
web-app-bigbluebutton
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-app-bluesky
Removed unneccessary handlers
2025-09-04 14:04:53 +02:00
web-app-bookwyrm
web-app-bookwyrm, web-app-confluence:
2025-09-03 10:45:41 +02:00
web-app-bridgy-fed
Cleaned up bridgy fed
2025-09-04 17:09:35 +02:00
web-app-chess
web-app-chess: fix Corepack/Yarn EACCES and switch to ARG-driven Dockerfile
2025-09-03 20:47:50 +02:00
web-app-confluence
web-app-bookwyrm, web-app-confluence:
2025-09-03 10:45:41 +02:00
web-app-desktop
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
web-app-discourse
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
web-app-elk
Refactor role naming for TLS and proxy stack
2025-08-29 14:38:20 +02:00
web-app-espocrm
…
web-app-friendica
Refactor: migrate cmp/* and srv/* roles into sys-stk/* and sys-svc/* namespaces
2025-08-28 22:23:09 +02:00
web-app-funkwhale
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-fusiondirectory
Refactor role naming for TLS and proxy stack
2025-08-29 14:38:20 +02:00
web-app-gitea
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
web-app-gitlab
feat(postgres): add split_postgres_connections filter and average pool fact
2025-08-31 20:04:14 +02:00
web-app-jenkins
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00
web-app-jira
Added correct CSP for JIRA
2025-09-03 11:35:24 +02:00
web-app-joomla
Refactor role naming for TLS and proxy stack
2025-08-29 14:38:20 +02:00
web-app-keycloak
keycloak: update realm mail settings to use smtp_server.json.j2 (SPOT); merge via kc_merge_path; fix display name and SSL handling
2025-09-05 18:09:33 +02:00
web-app-lam
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
web-app-listmonk
feat(postgres): add split_postgres_connections filter and average pool fact
2025-08-31 20:04:14 +02:00
web-app-magento
Solved missing variable bugs. Role is not fully implemented need to pause development on it for the moment
2025-09-05 17:07:15 +02:00
web-app-mailu
mailu: include base defaults for oletools (env_file/LD_PRELOAD)
2025-09-03 14:42:50 +02:00
web-app-mastodon
Added debug options to mastodon
2025-09-04 11:50:14 +02:00
web-app-matomo
replaced style-src-elem by style-src
2025-09-01 10:14:03 +02:00
web-app-matrix
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-mediawiki
Add initial XWiki role draft
2025-09-10 16:34:37 +02:00
web-app-mig
replaced style-src-elem by style-src
2025-09-01 10:14:03 +02:00
web-app-mobilizon
feat(postgres): add split_postgres_connections filter and average pool fact
2025-08-31 20:04:14 +02:00
web-app-moodle
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-navigator
replaced style-src-elem by style-src
2025-09-01 10:14:03 +02:00
web-app-nextcloud
Solved wrong variable bug
2025-09-05 17:30:08 +02:00
web-app-oauth2-proxy
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-openproject
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
web-app-peertube
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-pgadmin
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-phpldapadmin
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-phpmyadmin
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-pixelfed
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-app-postmarks
Add README.md files for web-app-bookwyrm, web-app-postmarks, and web-app-socialhome roles
2025-09-02 11:52:34 +02:00
web-app-pretix
Implemented config image for pretix
2025-09-01 16:20:04 +02:00
web-app-roulette-wheel
Refactor docker-compose build logic and pull policy
2025-08-28 11:25:35 +02:00
web-app-snipe-it
…
web-app-socialhome
Add README.md files for web-app-bookwyrm, web-app-postmarks, and web-app-socialhome roles
2025-09-02 11:52:34 +02:00
web-app-sphinx
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
web-app-syncope
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-app-taiga
feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
2025-09-01 10:10:23 +02:00
web-app-wordpress
replaced style-src-elem by style-src
2025-09-01 10:14:03 +02:00
web-app-xwiki
XWiki: LDAP/OIDC admin mapping, config mounts, and REST installs
2025-09-11 13:55:53 +02:00
web-app-yourls
feat(nextcloud): integrate Talk & Whiteboard; refactor to NEXTCLOUD_* vars; full-stack setup
2025-09-01 21:37:02 +02:00
web-opt-rdr-domains
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-opt-rdr-www
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-svc-asset
…
web-svc-cdn
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-svc-collabora
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-svc-coturn
…
web-svc-file
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-svc-html
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
web-svc-legal
…
web-svc-libretranslate
…
web-svc-logout
web-svc-logout: merge logout domains into CSP connect-src and refactor task flow
2025-09-01 16:41:33 +02:00
web-svc-simpleicons
…
web-svc-xmpp
…
__init__.py
…
.gitignore
…
categories.yml
Refactored server roles for better readability
2025-09-01 18:08:35 +02:00
glosar.rst
…
index.rst
…
TODO.md
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00