Kevin Veen-Birkenbach 6f3522dc28 fix(csp): resolve all CSP-related issues and extend webserver health checks ...

- Added _normalize_codes to support lists of valid HTTP status codes
- Updated web_health_expectations to handle multiple codes, deduplication, and fallback logic
- Extended unit tests with coverage for list/default combinations, invalid values, and alias behavior
- Fixed Flowise CSP flags and whitelist entries
- Adjusted Flowise, MinIO, and Pretix docker service resource limits
- Updated docker-compose templates with explicit service_name
- Corrected MinIO status_codes to 301 redirects

✅ All CSP errors fixed

See details: https://chatgpt.com/share/68d557ad-fc10-800f-b68b-0411d20ea6eb

2025-09-25 18:05:41 +02:00

..

desk-bluray-player

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-chromium

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-copyq

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-docker

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-firefox

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-git

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnome

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnome-caffeine

Refactor CDN and run_once handling

2025-09-01 14:11:36 +02:00

desk-gnome-extensions

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnome-terminal

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-gnucash

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-jrnl

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-keepassxc

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-libreoffice

Refactor and cleanup OIDC, desktop, and web-app roles

2025-08-26 20:44:05 +02:00

desk-micro

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-neovim

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-nextcloud

Optimized whitespacing

2025-09-23 00:51:23 +02:00

desk-obs

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-qbittorrent

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-retroarch

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-spotify

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-ssh

Refactor CDN and run_once handling

2025-09-01 14:11:36 +02:00

desk-torbrowser

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

desk-virtualbox

cleanup: remove unused handlers and add integration test for unused handlers

2025-09-02 11:02:30 +02:00

desk-zoom

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-base-devel

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-fakeroot

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-gcc

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-git

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-java

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-locales

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

dev-make

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-nodejs

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-npm

Enforce uppercase README.md and TODO.md filenames

2025-08-29 18:11:53 +02:00

dev-python-pip

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-python-yaml

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-shell

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

dev-yay

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

docker-compose

Solved ollama network bug

2025-09-23 02:21:20 +02:00

docker-container

Refactor OpenProject role:

2025-09-24 17:22:47 +02:00

drv-epson-multiprinter

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

drv-intel

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

drv-lid-switch

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

drv-non-free

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

gen-hunspell

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

pkgmgr

Refactor: consolidate pkgmgr updates and remove legacy roles

2025-09-06 10:46:39 +02:00

pkgmgr-install

Install swapfile tool correct

2025-09-25 13:16:13 +02:00

svc-ai-ollama

feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names

2025-09-23 21:43:50 +02:00

svc-bkp-loc-2-usb

cleanup: remove unused handlers and add integration test for unused handlers

2025-09-02 11:02:30 +02:00

svc-bkp-rmt-2-loc

Solved service ignore parameter bugs

2025-08-21 21:04:21 +02:00

svc-db-mariadb

feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names

2025-09-23 21:43:50 +02:00

svc-db-memcached

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

svc-db-openldap

Added whitespaces

2025-09-23 00:59:55 +02:00

svc-db-postgres

feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names

2025-09-23 21:43:50 +02:00

svc-db-redis

Mailu/Redis: add explicit service resource limits & clamav_db volume

2025-09-24 13:31:54 +02:00

svc-net-wireguard-core

Solved wireguard name bugs

2025-08-29 13:03:06 +02:00

svc-net-wireguard-firewalled

Refactor systemctl services and timers

2025-08-18 21:22:16 +02:00

svc-net-wireguard-plain

refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo

2025-08-19 15:00:44 +02:00

svc-opt-keyboard-color

feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup

2025-09-10 17:24:56 +02:00

svc-opt-ssd-hdd

Enforce uppercase README.md and TODO.md filenames

2025-08-29 18:11:53 +02:00

svc-opt-swapfile

Install swapfile tool correct

2025-09-25 13:16:13 +02:00

svc-prx-openresty

Refactor resource configuration:

2025-09-24 09:58:30 +02:00

sys-bkp-provider

Refactor systemctl services and categories due to alarm bugs

2025-08-18 13:35:43 +02:00

sys-bkp-provider-user

Refactor systemctl services and categories due to alarm bugs

2025-08-18 13:35:43 +02:00

sys-cli

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

sys-ctl-alm-compose

Optimized variables

2025-09-12 02:41:33 +02:00

sys-ctl-alm-email

Optimized alarm and system handlers

2025-08-20 15:17:04 +02:00

sys-ctl-alm-telegram

Optimized alarm and system handlers

2025-08-20 15:17:04 +02:00

sys-ctl-bkp-docker-2-loc

Removed deathlock between sys-ctl-bkp-docker-2-loc and sys-ctl-cln-faild-bkps - Timer handles now cleanup exclusively

2025-09-19 11:21:18 +02:00

sys-ctl-cln-anon-volumes

Removed waiting for other services, otherwise it ends up breaking, waiting for hard restart service

2025-08-26 19:23:47 +02:00

sys-ctl-cln-bkps

Removed deathlock and optimized run_once settings for performance

2025-09-11 21:48:56 +02:00

sys-ctl-cln-certs

refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo

2025-08-19 15:00:44 +02:00

sys-ctl-cln-disc-space

feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup

2025-09-10 17:24:56 +02:00

sys-ctl-cln-faild-bkps

Removed deathlock between sys-ctl-bkp-docker-2-loc and sys-ctl-cln-faild-bkps - Timer handles now cleanup exclusively

2025-09-19 11:21:18 +02:00

sys-ctl-hlth-btrfs

Optimized webserver on failure

2025-08-20 04:12:42 +02:00

sys-ctl-hlth-csp

Surpress flushing of CSP and Webserver health checks during setup because tests will fail if procedures didn't finish

2025-09-11 22:31:24 +02:00

sys-ctl-hlth-disc-space

feat(sys-service): migrate cleanup/backup services to generic units; harden disk-space cleanup

2025-09-10 17:24:56 +02:00

sys-ctl-hlth-docker-container

sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests

2025-09-03 11:24:14 +02:00

sys-ctl-hlth-docker-volumes

sys-ctl-rpr-docker-soft: switch to STRICT label mode and adapt tests

2025-09-03 11:24:14 +02:00

sys-ctl-hlth-journalctl

Activated system_service_suppress_flush for journalctl servic4

2025-08-29 12:26:53 +02:00

sys-ctl-hlth-msmtp

Optimized variables

2025-09-12 02:41:33 +02:00

sys-ctl-hlth-webserver

fix(csp): resolve all CSP-related issues and extend webserver health checks

2025-09-25 18:05:41 +02:00

sys-ctl-mtn-cert-deploy

Solvewd tabulator bug

2025-08-20 05:02:16 +02:00

sys-ctl-mtn-cert-renew

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-ctl-rpr-btrfs-balancer

Refactor systemd handling

2025-09-11 18:24:21 +02:00

sys-ctl-rpr-docker-hard

Optimized more run_once routines for performance

2025-09-11 22:16:42 +02:00

sys-ctl-rpr-docker-soft

Optimized more run_once routines for performance

2025-09-11 22:16:42 +02:00

sys-daemon

Removed refresh systemctl service listener for systemctl daemon

2025-09-11 22:37:16 +02:00

sys-dns-cloudflare-records

Refactor DNS handling and add solo record support

2025-09-19 15:29:11 +02:00

sys-dns-hetzner-rdns

Revert "Removed incorrect flavor cloud for hetzner"

2025-09-12 00:43:46 +02:00

sys-dns-wildcards

Explicit activated async for creating of parent DNS entries

2025-09-20 09:30:16 +02:00

sys-front-inj-all

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-front-inj-css

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-front-inj-desktop

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-front-inj-javascript

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-front-inj-logout

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-front-inj-matomo

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-hostname

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

sys-lock

Solved empty entry bug

2025-08-18 23:54:23 +02:00

sys-postfix

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

sys-service

feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

2025-09-22 18:40:20 +02:00

sys-stk-back-stateful

Refactor: migrate cmp/* and srv/* roles into sys-stk/* and sys-svc/* namespaces

2025-08-28 22:23:09 +02:00

sys-stk-back-stateless

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

sys-stk-front-proxy

feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

2025-09-22 18:40:20 +02:00

sys-stk-front-pure

feat(dns): add sys-svc-dns role and extend parent DNS handling

2025-09-11 23:47:27 +02:00

sys-stk-full-stateful

feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

2025-09-22 18:40:20 +02:00

sys-stk-full-stateless

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

sys-sudo

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

sys-svc-cdn

Required to move handler reloading one level higher

2025-09-22 21:07:34 +02:00

sys-svc-certbot

refactor(dns): unify Cloudflare + Hetzner handling across roles

2025-08-16 21:43:01 +02:00

sys-svc-certs

DNS & certs refactor:

2025-09-19 11:22:51 +02:00

sys-svc-cln-domains

Refactored server roles for better readability

2025-09-01 18:08:35 +02:00

sys-svc-dns

Refactor DNS handling and add solo record support

2025-09-19 15:29:11 +02:00

sys-svc-docker

Refactor svc-opt-swapfile role: move core logic into 01_core.yml, simplify tasks/main.yml, and integrate swapfile setup into sys-svc-docker/01_core.yml to prevent OOM failures. See https://chatgpt.com/share/68d518f2-ba0c-800f-8a3a-c6b045763ac6

2025-09-25 12:27:13 +02:00

sys-svc-journalctl

Refactor systemctl services and categories due to alarm bugs

2025-08-18 13:35:43 +02:00

sys-svc-letsencrypt

feat(dns): add sys-svc-dns role and extend parent DNS handling

2025-09-11 23:47:27 +02:00

sys-svc-msmtp

Updated sys-svc-msmtp execution condition

2025-08-27 18:12:49 +02:00

sys-svc-proxy

Open WebUI OIDC & proxy fixes + Ollama preload + async-safe pull

2025-09-23 04:27:46 +02:00

sys-svc-rdbms

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

sys-svc-sshd

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

sys-svc-webserver

Refactor resource configuration:

2025-09-24 09:58:30 +02:00

sys-timer

refactor: improve service handling and introduce MODE_ASSERT

2025-08-19 19:02:52 +02:00

sys-timer-cln-bkps

refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo

2025-08-19 15:00:44 +02:00

sys-util-csp-cert

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

update-apt

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

update-compose

Removed update-pip

2025-09-11 14:48:22 +02:00

update-pacman

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

update-yay

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

user

THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs

2025-08-15 15:15:48 +02:00

user-administrator

refactor: improve service handling and introduce MODE_ASSERT

2025-08-19 19:02:52 +02:00

user-root

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-browser

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-design

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-dev-arduino

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-dev-core

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-dev-java

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-dev-php

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-dev-python

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-dev-shell

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-game-compose

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-game-os

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-game-windows

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-desk-office

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-dev-admin

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-dev-admin-network

Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf

2025-08-14 14:39:18 +02:00

util-srv-corporate-identity

Renamed web-app-port-ui to web-app-desktop

2025-08-26 11:35:22 +02:00

web-app-akaunting

Inverted docker_compose_skipp_file_creation to don't use double negation

2025-09-22 13:40:28 +02:00

web-app-baserow

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-bigbluebutton

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-app-bluesky

Deactivated proxying of bluesky web domain

2025-09-25 13:31:18 +02:00

web-app-bookwyrm

Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See: https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1

2025-09-20 09:31:49 +02:00

web-app-bridgy-fed

Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See: https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1

2025-09-20 09:31:49 +02:00

web-app-chess

Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See: https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1

2025-09-20 09:31:49 +02:00

web-app-confluence

feat(jvm): add robust JVM sizing filters and apply across Confluence/Jira

2025-09-24 11:29:40 +02:00

web-app-desktop

Added cdn.jsdelivr.net to connect-src for web-app-desktop

2025-09-24 15:35:11 +02:00

web-app-discourse

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-app-elk

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-espocrm

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-flowise

fix(csp): resolve all CSP-related issues and extend webserver health checks

2025-09-25 18:05:41 +02:00

web-app-friendica

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-app-funkwhale

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-fusiondirectory

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-gitea

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-gitlab

feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names

2025-09-23 21:43:50 +02:00

web-app-jenkins

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-jira

feat(jvm): add robust JVM sizing filters and apply across Confluence/Jira

2025-09-24 11:29:40 +02:00

web-app-joomla

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-keycloak

feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names

2025-09-23 21:43:50 +02:00

web-app-lam

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-listmonk

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-app-magento

Refactor resource configuration:

2025-09-24 09:58:30 +02:00

web-app-mailu

Mailu/Redis: add explicit service resource limits & clamav_db volume

2025-09-24 13:31:54 +02:00

web-app-mastodon

mastodon: tighten resources, robust exec tasks, and env defaults

2025-09-24 01:52:18 +02:00

web-app-matomo

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-matrix

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-app-mediawiki

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-mig

Little optimations

2025-09-22 11:17:31 +02:00

web-app-minio

fix(csp): resolve all CSP-related issues and extend webserver health checks

2025-09-25 18:05:41 +02:00

web-app-mobilizon

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-moodle

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-navigator

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-nextcloud

Refactor resource configuration:

2025-09-24 09:58:30 +02:00

web-app-oauth2-proxy

Reduced port exposal to local for better encapsulation

2025-09-19 19:43:16 +02:00

web-app-openproject

Optimized OpenProject and CSP rules

2025-09-25 14:47:28 +02:00

web-app-openwebui

Optimized README.md

2025-09-23 13:47:46 +02:00

web-app-peertube

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-app-pgadmin

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-phpldapadmin

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-phpmyadmin

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-pixelfed

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-postmarks

Add README.md files for web-app-bookwyrm, web-app-postmarks, and web-app-socialhome roles

2025-09-02 11:52:34 +02:00

web-app-pretix

fix(csp): resolve all CSP-related issues and extend webserver health checks

2025-09-25 18:05:41 +02:00

web-app-roulette-wheel

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-snipe-it

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-socialhome

Add README.md files for web-app-bookwyrm, web-app-postmarks, and web-app-socialhome roles

2025-09-02 11:52:34 +02:00

web-app-sphinx

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-app-syncope

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-app-taiga

Optimized whitespacing

2025-09-23 00:51:23 +02:00

web-app-wordpress

feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names

2025-09-23 21:43:50 +02:00

web-app-xwiki

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-app-yourls

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-opt-rdr-domains

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-opt-rdr-www

Removed sys-dns-cloudflare-records from web-opt-rdr-www because it's covered by other tasks

2025-09-12 03:55:52 +02:00

web-svc-asset

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-svc-cdn

feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

2025-09-22 18:40:20 +02:00

web-svc-collabora

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-svc-coturn

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-svc-file

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-svc-html

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-svc-legal

Removed whitespaces in templates:

2025-09-22 16:28:57 +02:00

web-svc-libretranslate

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-svc-logout

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

web-svc-simpleicons

refactor(ansible): normalize include_role syntax and unify host config paths via path_join

2025-09-22 14:55:25 +02:00

web-svc-xmpp

web: general domain cleanup (canonical/aliases normalization)

2025-09-19 14:51:56 +02:00

__init__.py

Optimized RBAC via LDAP

2025-07-04 08:03:27 +02:00

.gitignore

Finished optimization for today

2025-03-20 17:00:07 +01:00

categories.yml

feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

2025-09-22 18:40:20 +02:00

glosar.rst

Added new categories description scheme

2025-07-10 15:36:40 +02:00

index.rst

Optimized roles documentation

2025-07-12 17:52:36 +02:00