mirror of
				https://github.com/kevinveenbirkenbach/computer-playbook.git
				synced 2025-11-04 04:08:15 +00:00 
			
		
		
		
	- Switch certbot flag from MODE_TEST → MODE_DUMMY in dedicated certs - Add sys-svc-dns defaults for CLOUDFLARE_NAMESERVERS - Introduce 02_nameservers.yml for NS cleanup + enforce, adjust task ordering (apex now 03_apex.yml) - Enforce quoting for Bluesky and Mailu TXT records - Add cleanup of MX/TXT/DMARC/DKIM in Mailu role - Normalize no_log handling in Nextcloud plugin - Simplify async conditionals in Collabora role Conversation: https://chatgpt.com/share/68cd20d8-9ba8-800f-b070-f7294f072c40
		
			
				
	
	
		
			33 lines
		
	
	
		
			1.2 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			33 lines
		
	
	
		
			1.2 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
- name: "load docker, proxy for '{{ application_id }}'"
 | 
						|
  include_role:
 | 
						|
    name: sys-stk-full-stateless
 | 
						|
    public: true
 | 
						|
  vars:
 | 
						|
    docker_compose_flush_handlers: true
 | 
						|
    
 | 
						|
- name: "generate {{ domain }}.conf"
 | 
						|
  template:
 | 
						|
    src: "nginx.conf.j2"
 | 
						|
    dest: "{{ [ NGINX.DIRECTORIES.HTTP.SERVERS, domain ~ '.conf'] | path_join }}"
 | 
						|
  notify: restart openresty
 | 
						|
 | 
						|
- name: Update Collabora systemplate to include new fonts
 | 
						|
  command: "{{ COLLABORA_DOCKER_CONF_EXEC }} update-system-template"
 | 
						|
  register: collabora_fonts
 | 
						|
  changed_when: >
 | 
						|
    (not ASYNC_ENABLED | bool )
 | 
						|
    and
 | 
						|
    ('updated' in (collabora_fonts.stdout | default('')))
 | 
						|
  async: "{{ ASYNC_TIME  if (ASYNC_ENABLED |  bool) else omit }}"
 | 
						|
  poll:  "{{ ASYNC_POLL if (ASYNC_ENABLED |  bool) else omit }}"
 | 
						|
  when: MODE_UPDATE | bool
 | 
						|
 | 
						|
- name: Allow Nextcloud host IP for Collabora preview conversion
 | 
						|
  command: "{{ COLLABORA_DOCKER_CONF_EXEC }} set net.post_allow.host {{ networks.internet.ip4 }}"
 | 
						|
  register: collabora_preview
 | 
						|
  changed_when: >
 | 
						|
    (not ASYNC_ENABLED | bool )
 | 
						|
    and
 | 
						|
    ('already present' not in (collabora_preview.stdout | default('')))
 | 
						|
  async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
 | 
						|
  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}" |