mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-09 04:06:42 +00:00
sys-stk-front-proxy renders one vhost per network sibling, and each pass ran sys-front-inj-design, which composes app.css.j2 with lookup('cdn') aligned to that pass's network and writes the result to the single path roles/<app>/latest/css/style.css. The onion pass runs last, so the clearnet page loaded the onion logo URLs from the clearnet CDN (fork run 40042690056, job 120723739575: both renders changed the file, onion at log line 161228). That failed the clearnet design checks of docs (18 jobs), prometheus (12), baserow, hermes, mattermost, openproject and pretix, and the clearnet network-leak checks of docs, pretix and mattermost. 8187db557c already gated who writes the file; the content still depended on the rendering pass.
The composed sheet now drops the CDN scheme and host, the way cfc0c337ab did inside Stalwart's own sheet. The file is byte-identical in every network and its root-relative URLs resolve against the CDN vhost the page loaded it from; the custom properties all sit inside url().
Roundcube's skin_logo is an <img src> in the document, where a relative URL would resolve against the webmail host, so webmail-design.inc.php.j2 renders a map from each webmail sibling host to the CDN origin of the same network and picks it by HTTP_HOST, falling back to the canonical CDN for any other host. That fixes stalwart+tor test-design.js:892 (nine onion passes showed the clearnet logo).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Artefact documentation 🧱
This directory contains contributor rules for project artefacts. Its scope is how repository-managed files and generated delivery artefacts should be documented, structured, and maintained.