kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-31 18:29:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
97f4045c6855ab7d61d20e2278bd07148a8e5ca3
computer-playbook/roles
History
Kevin Veen-Birkenbach 97f4045c68 Keycloak: align client attributes with realm dictionary 
- Extended kc_force_attrs in tasks/main.yml to source 'publicClient',
  'serviceAccountsEnabled' and 'frontchannelLogout' directly from
  KEYCLOAK_DICTIONARY_REALM for consistency with import definitions.
- Updated default.json.j2 import template to set 'publicClient' to true.
- Public client mode is required so the frontend API of role 'web-app-desktop'
  can handle login/logout flows without client secret.

Ref: https://chatgpt.com/share/68ae0060-4fac-800f-9f02-22592a4087d3
2025-08-26 21:22:27 +02:00
..
cmp-db-docker
…
cmp-db-docker-proxy
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
cmp-docker-oauth2
…
cmp-docker-proxy
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
cmp-rdbms
…
desk-bluray-player
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-chromium
…
desk-copyq
…
desk-docker
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-firefox
…
desk-git
…
desk-gnome
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnome-caffeine
…
desk-gnome-extensions
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-gnome-terminal
…
desk-gnucash
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-jrnl
…
desk-keepassxc
…
desk-libreoffice
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
desk-micro
…
desk-neovim
…
desk-nextcloud
…
desk-obs
…
desk-qbittorrent
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
desk-retroarch
…
desk-spotify
…
desk-ssh
…
desk-torbrowser
…
desk-virtualbox
…
desk-zoom
…
dev-base-devel
…
dev-fakeroot
…
dev-gcc
…
dev-git
…
dev-java
…
dev-locales
…
dev-make
…
dev-nodejs
…
dev-npm
…
dev-python-pip
…
dev-python-yaml
…
dev-shell
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-yay
…
docker-compose
In between commit, updated matrix and optimized mailu
2025-08-20 17:51:17 +02:00
docker-container
…
drv-epson-multiprinter
…
drv-intel
…
drv-lid-switch
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-non-free
…
gen-hunspell
…
pkgmgr
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
pkgmgr-install
…
srv-composer
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
srv-core
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
srv-domain-provision
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
srv-https-stack
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
srv-letsencrypt
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
srv-proxy-core
Set default buffer level for proxy basic conf, which are necessary for OIDC login
2025-08-20 15:56:32 +02:00
srv-tls-core
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
svc-bkp-loc-2-usb
Removed cleanup service lock
2025-08-19 19:06:58 +02:00
svc-bkp-rmt-2-loc
Solved service ignore parameter bugs
2025-08-21 21:04:21 +02:00
svc-db-mariadb
…
svc-db-memcached
…
svc-db-openldap
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
svc-db-postgres
…
svc-db-redis
…
svc-net-wireguard-core
…
svc-net-wireguard-firewalled
…
svc-net-wireguard-plain
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
svc-opt-keyboard-color
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
svc-opt-ssd-hdd
Solved svc-opt-ssd-hdd path bug
2025-08-19 21:50:55 +02:00
svc-opt-swapfile
Refactor systemctl services and categories due to alarm bugs
2025-08-18 13:35:43 +02:00
svc-prx-openresty
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
sys-bkp-provider
…
sys-bkp-provider-user
…
sys-cli
…
sys-ctl-alm-compose
Deactivated on_failure for telegram and email
2025-08-20 01:20:06 +02:00
sys-ctl-alm-email
Optimized alarm and system handlers
2025-08-20 15:17:04 +02:00
sys-ctl-alm-telegram
Optimized alarm and system handlers
2025-08-20 15:17:04 +02:00
sys-ctl-bkp-docker-2-loc
Solved service ignore parameter bugs
2025-08-21 21:04:21 +02:00
sys-ctl-cln-anon-volumes
Removed waiting for other services, otherwise it ends up breaking, waiting for hard restart service
2025-08-26 19:23:47 +02:00
sys-ctl-cln-bkps
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
sys-ctl-cln-certs
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
sys-ctl-cln-disc-space
sys-ctl: make service file generation deterministic and simplify ignore logic
2025-08-21 18:43:17 +02:00
sys-ctl-cln-faild-bkps
Corrected link
2025-08-22 09:23:40 +02:00
sys-ctl-hlth-btrfs
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-hlth-csp
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-hlth-disc-space
Add integration test: ensure roles including 'sys-service' define system_service_id
2025-08-20 04:46:27 +02:00
sys-ctl-hlth-docker-container
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-hlth-docker-volumes
sys-service: add ExecStartPost support and adjust health/repair roles
2025-08-26 10:15:35 +02:00
sys-ctl-hlth-journalctl
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-hlth-msmtp
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-hlth-webserver
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
sys-ctl-mtn-cert-deploy
Solvewd tabulator bug
2025-08-20 05:02:16 +02:00
sys-ctl-mtn-cert-renew
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
sys-ctl-rpr-btrfs-balancer
Optimized webserver on failure
2025-08-20 04:12:42 +02:00
sys-ctl-rpr-docker-hard
Switched OnFailure with StartPost
2025-08-26 19:10:41 +02:00
sys-ctl-rpr-docker-soft
Fix: correct Docker Go template syntax in sys-ctl-rpr-docker-soft script
2025-08-26 18:25:25 +02:00
sys-daemon
sys-daemon & sys-service: align timeout handling
2025-08-26 18:48:45 +02:00
sys-dns-cloudflare-records
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
sys-dns-hetzner-rdns
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
sys-hostname
…
sys-lock
…
sys-postfix
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-service
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
sys-srv-web-inj-compose
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
sys-srv-web-inj-css
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
sys-srv-web-inj-desktop
Renamed web-app-port-ui to web-app-desktop
2025-08-26 11:35:22 +02:00
sys-srv-web-inj-javascript
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
sys-srv-web-inj-logout
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
sys-srv-web-inj-matomo
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
sys-sudo
…
sys-svc-certbot
refactor(dns): unify Cloudflare + Hetzner handling across roles
2025-08-16 21:43:01 +02:00
sys-svc-cln-domains
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
sys-svc-directory-validator
…
sys-svc-docker
Implemented sys-svc-cln-anon-volumes as service so that it can be triggert after sys-ctl-rpr-docker-hard
2025-08-22 14:48:50 +02:00
sys-svc-journalctl
…
sys-svc-msmtp
Removed variable which leads to bugs in other contexts
2025-08-19 20:50:08 +02:00
sys-svc-sshd
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-timer
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
sys-timer-cln-bkps
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
update-apt
…
update-compose
…
update-docker
Moved update commands to nextcloud role
2025-08-20 06:07:33 +02:00
update-pacman
…
update-pip
…
update-pkgmgr
…
update-yay
…
user
…
user-administrator
refactor: improve service handling and introduce MODE_ASSERT
2025-08-19 19:02:52 +02:00
user-root
…
util-desk-browser
…
util-desk-design
…
util-desk-dev-arduino
…
util-desk-dev-core
…
util-desk-dev-java
…
util-desk-dev-php
…
util-desk-dev-python
…
util-desk-dev-shell
…
util-desk-game-compose
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-game-os
…
util-desk-game-windows
…
util-desk-office
…
util-dev-admin
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-dev-admin-network
…
util-srv-corporate-identity
Renamed web-app-port-ui to web-app-desktop
2025-08-26 11:35:22 +02:00
web-app-akaunting
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-attendize
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-app-baserow
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-bigbluebutton
Optimized bbb variables
2025-08-23 19:21:07 +02:00
web-app-bluesky
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-app-bookwyrm
…
web-app-chess
…
web-app-desktop
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
web-app-discourse
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-elk
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-app-espocrm
refactor(web-app-espocrm): improve config patching and container vars
2025-08-22 16:01:48 +02:00
web-app-friendica
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-funkwhale
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-fusiondirectory
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-app-gitea
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-gitlab
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-jenkins
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-joomla
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-keycloak
Keycloak: align client attributes with realm dictionary
2025-08-26 21:22:27 +02:00
web-app-lam
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-listmonk
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-mailu
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
web-app-mastodon
Optimized variables
2025-08-21 16:27:10 +02:00
web-app-matomo
Update trusted domains for matomo
2025-08-20 15:35:08 +02:00
web-app-matrix
Optimized variables
2025-08-21 16:27:10 +02:00
web-app-mediawiki
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-mig
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
web-app-mobilizon
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-moodle
Optimized spacinbg
2025-08-20 05:49:35 +02:00
web-app-mybb
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-app-navigator
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-nextcloud
Optimized variables
2025-08-21 16:27:10 +02:00
web-app-oauth2-proxy
Set default buffer level for proxy basic conf, which are necessary for OIDC login
2025-08-20 15:56:32 +02:00
web-app-openproject
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-peertube
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-app-pgadmin
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-phpldapadmin
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-phpmyadmin
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-pixelfed
Optimized variables
2025-08-21 16:27:10 +02:00
web-app-postmarks
…
web-app-pretix
…
web-app-roulette-wheel
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-snipe-it
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-socialhome
…
web-app-sphinx
Optimized spacing
2025-08-20 01:01:32 +02:00
web-app-syncope
In between commit, updated matrix and optimized mailu
2025-08-20 17:51:17 +02:00
web-app-taiga
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
web-app-wordpress
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
web-app-yourls
Optimized spacing
2025-08-20 01:01:32 +02:00
web-opt-rdr-domains
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-opt-rdr-www
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-svc-asset
…
web-svc-cdn
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-svc-collabora
web-svc-collabora: localize vars, adjust CSP, fix systemd perms; refactor role composition
2025-08-21 16:48:37 +02:00
web-svc-coturn
Renamed some web apps to web servicesy
2025-08-20 05:00:24 +02:00
web-svc-file
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-svc-html
Renamed webserver roles to more speakable names
2025-08-20 08:54:17 +02:00
web-svc-legal
…
web-svc-libretranslate
Renamed some web apps to web servicesy
2025-08-20 05:00:24 +02:00
web-svc-logout
Optimized spacing
2025-08-20 01:02:29 +02:00
web-svc-simpleicons
Refactor and cleanup OIDC, desktop, and web-app roles
2025-08-26 20:44:05 +02:00
web-svc-xmpp
Renamed some web apps to web servicesy
2025-08-20 05:00:24 +02:00
__init__.py
…
.gitignore
…
categories.yml
…
glosar.rst
…
index.rst
…
Todo.md
…