mirror of
				https://github.com/kevinveenbirkenbach/computer-playbook.git
				synced 2025-10-31 10:19:09 +00:00 
			
		
		
		
	- Normalize domain blocks across apps:
  - Add explicit 'aliases: []' everywhere (no implicit aliases)
  - Standardize canonical subdomains for consistency:
    * Bluesky: web/api under *.bluesky.<PRIMARY_DOMAIN>
    * EspoCRM: espo.crm.<PRIMARY_DOMAIN>
    * Gitea:   tea.git.<PRIMARY_DOMAIN>
    * GitLab:  lab.git.<PRIMARY_DOMAIN>
    * Joomla:  joomla.cms.<PRIMARY_DOMAIN>
    * Magento: magento.shop.<PRIMARY_DOMAIN>
    * OpenProject: open.project.<PRIMARY_DOMAIN>
    * Pretix:  ticket.shop.<PRIMARY_DOMAIN>
    * Taiga:   kanban.project.<PRIMARY_DOMAIN>
  - Remove legacy/duplicate aliases and use empty list instead
  - Fix 'alias' -> 'aliases' where applicable
Context: preparing for AUTO_BUILD_ALIASES=False and deterministic redirect mapping.
Ref: conversation https://chatgpt.com/share/68cd512c-c878-800f-bdf2-81737adf7e0e
		
	
		
			
				
	
	
		
			41 lines
		
	
	
		
			922 B
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			41 lines
		
	
	
		
			922 B
		
	
	
	
		
			YAML
		
	
	
	
	
	
| docker:
 | |
|   versions:               
 | |
|     api:        "1.4.0"
 | |
|     front:      "1.4.0"
 | |
|     typesense:  "typesense/typesense"
 | |
|   images:               
 | |
|     api:        "funkwhale/api"
 | |
|     front:      "funkwhale/front"
 | |
|     typesense:  "typesense/typesense"
 | |
|   services:
 | |
|     redis:
 | |
|       enabled: true
 | |
|     database:
 | |
|       enabled: true
 | |
| features:
 | |
|   matomo:             true
 | |
|   css:                false
 | |
|   desktop:            true
 | |
|   ldap:               true
 | |
|   central_database:   true
 | |
|   oauth2:             false # Doesn't make sense to activate it atm, because login is possible on homepage
 | |
|   logout:             true
 | |
| server:
 | |
|   domains:
 | |
|     canonical:
 | |
|       - "audio.{{ PRIMARY_DOMAIN }}"
 | |
|     aliases: []
 | |
|   csp:  
 | |
|     flags:
 | |
|       style-src:
 | |
|         unsafe-inline:  true
 | |
|     whitelist:
 | |
|       font-src:
 | |
|         -  "data:"
 | |
| oauth2_proxy:  
 | |
|   application:        "front"
 | |
|   port:               "80"
 | |
|   acl:
 | |
|     blacklist:
 | |
|       - "/login"
 |