mirror of
				https://github.com/kevinveenbirkenbach/computer-playbook.git
				synced 2025-10-31 02:10:05 +00:00 
			
		
		
		
	- Normalize domain blocks across apps:
  - Add explicit 'aliases: []' everywhere (no implicit aliases)
  - Standardize canonical subdomains for consistency:
    * Bluesky: web/api under *.bluesky.<PRIMARY_DOMAIN>
    * EspoCRM: espo.crm.<PRIMARY_DOMAIN>
    * Gitea:   tea.git.<PRIMARY_DOMAIN>
    * GitLab:  lab.git.<PRIMARY_DOMAIN>
    * Joomla:  joomla.cms.<PRIMARY_DOMAIN>
    * Magento: magento.shop.<PRIMARY_DOMAIN>
    * OpenProject: open.project.<PRIMARY_DOMAIN>
    * Pretix:  ticket.shop.<PRIMARY_DOMAIN>
    * Taiga:   kanban.project.<PRIMARY_DOMAIN>
  - Remove legacy/duplicate aliases and use empty list instead
  - Fix 'alias' -> 'aliases' where applicable
Context: preparing for AUTO_BUILD_ALIASES=False and deterministic redirect mapping.
Ref: conversation https://chatgpt.com/share/68cd512c-c878-800f-bdf2-81737adf7e0e
		
	
		
			
				
	
	
		
			63 lines
		
	
	
		
			1.3 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			63 lines
		
	
	
		
			1.3 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
| credentials: {}
 | |
| docker:
 | |
|   services:
 | |
|     redis:
 | |
|       enabled:      false
 | |
|     database:
 | |
|       enabled:      true
 | |
|       type:         postgres
 | |
|     xwiki:
 | |
|       image:        xwiki
 | |
|       version:      lts-<< defaults_applications[web-app-xwiki].docker.services.database.type >>-tomcat
 | |
|       name:         xwiki
 | |
|       backup:
 | |
|         no_stop_required: true
 | |
|   volumes:
 | |
|     data:           "xwiki_data"
 | |
| features:
 | |
|   matomo:           true
 | |
|   css:              true
 | |
|   desktop:          true
 | |
|   central_database: true
 | |
|   logout:           true
 | |
|   oidc:             true
 | |
|   ldap:             false # Just OIDC or LDAP can be enabled
 | |
| server:
 | |
|   csp:
 | |
|     whitelist:
 | |
|       worker-src:
 | |
|         - "blob:"
 | |
|     flags:
 | |
|       script-src:
 | |
|         unsafe-eval:    true
 | |
|       script-src-elem:
 | |
|         unsafe-inline:  true
 | |
|   domains:
 | |
|     canonical:
 | |
|       - "x.wiki.{{ PRIMARY_DOMAIN }}"
 | |
|     aliases: []
 | |
| rbac:
 | |
|   roles: {}
 | |
| ldap:
 | |
|   local_enabled: true # Allows local login if LDAP is down
 | |
| 
 | |
| plugins:
 | |
|   oidc:
 | |
|     enabled: true
 | |
|     items:
 | |
|       - id: "org.xwiki.contrib.oidc:oidc-authenticator"
 | |
|         version: ""
 | |
| 
 | |
|   ldap:
 | |
|     enabled: false
 | |
|     items:
 | |
|       - id: "org.xwiki.contrib.ldap:ldap-authenticator"
 | |
|         version: "9.15.7"
 | |
| 
 | |
|   # Example for Matomo
 | |
|   matomo:
 | |
|     enabled: false
 | |
|     items:
 | |
|       - id: "org.xwiki.contrib:matomo"
 | |
|         version: "1.0"
 |