mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-02 15:39:57 +00:00
Kevin Veen-Birkenbach
e09f561f0b
- Replace legacy utils/run_once.yml with the new helpers utils/once_flag.yml and utils/once_finalize.yml - Introduce utils/compose_up.yml to ensure docker-compose stacks are up and to flush handlers safely without coupling to run-once flags - Migrate all affected roles (desk-*, dev-*, sys-ctl-*, sys-svc-*, web-app-*, web-svc-*, util-*) to the new run-once helpers - Rework sys-svc-msmtp to auto-load Mailu once per deploy, check reachability, and reuse the running stack instead of requiring multiple playbook passes - Adjust web-app-mailu to integrate cert deployment, handler flushing, and run-once handling so Mailu is fully initialized in a single deploy - Improve Matomo, CDN, logout and CSP/health-check related roles to cooperate with the new compose_up / once_* pattern - Simplify alarm/backup/timer/service orchestration (sys-ctl-alm-*, sys-bkp-provider, sys-timer-cln-bkps, etc.) by moving run-once logic into dedicated 01_core.yml files - Update integration tests so utils/once_flag.yml and utils/once_finalize.yml are recognised as valid run-once providers, keeping the global run_once_* guarantees consistent - Align frontend injection and service dependencies so Mastodon- and Mailu-related services can be brought up coherently within a single deployment cycle rather than several iterations
OnlyOffice
Description
This Ansible role deploys the ONLYOFFICE Document Server in Docker to provide real-time, in-browser editing for documents, spreadsheets, and presentations. It automates the setup of the Document Server container, Nginx reverse proxy configuration, network isolation via Docker networks, and environment variable management for secure integration with Nextcloud or other WOPI-compatible platforms.
Overview
- Dockerized ONLYOFFICE Document Server: Uses the official
onlyoffice/documentserverimage. - Nginx Reverse Proxy: Configures a public-facing proxy with TLS termination for
/and internal API calls. - Docker Network Management: Creates an isolated
/28subnet for ONLYOFFICE and connects containers securely. - Environment Configuration: Generates a
.envfile containing domain, credentials, and JWT configuration for secure document editing.
Features
- Automatic creation of a dedicated Docker network for ONLYOFFICE.
- Proxy configuration template for Nginx with long timeouts.
- Customizable domain names and ports via Ansible variables.
- Support for SSL/TLS termination at the proxy level.
- Optional JWT signing for secure communication between Nextcloud and Document Server.
- Integration hooks to restart Nginx and recreate Docker Compose stacks on changes.
Documentation
See the role’s README.md, task files, and Jinja2 templates in the roles/web-svc-onlyoffice directory for usage examples and variable definitions.