kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-11-09 06:36:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
b9fbf92461932f6ffb2f4e41b48ba7aed142eeaf
computer-playbook/roles
History
Kevin Veen-Birkenbach b9fbf92461 proxy(cors): make ACAO opt-in; remove hardcoded default 
Stop forcing Access-Control-Allow-Origin to $scheme://$host. This default broke Element (element.infinito.nexus) -> Synapse (matrix.infinito.nexus) CORS and blocked login. Now ACAO is only set when 'aca_origin' is provided; otherwise we defer to the upstream app (e.g., Synapse) to emit correct CORS headers. Also convert top comments to Jinja block comment.

Discussion & debugging details: https://chatgpt.com/share/68de2236-4aec-800f-adc5-d025922c8753
2025-10-02 08:57:14 +02:00
..
desk-bluray-player
…
desk-chromium
…
desk-copyq
…
desk-docker
…
desk-firefox
…
desk-git
…
desk-gnome
…
desk-gnome-caffeine
Refactor CDN and run_once handling
2025-09-01 14:11:36 +02:00
desk-gnome-extensions
…
desk-gnome-terminal
…
desk-gnucash
…
desk-jrnl
…
desk-keepassxc
…
desk-libreoffice
…
desk-micro
…
desk-neovim
…
desk-nextcloud
…
desk-obs
…
desk-qbittorrent
…
desk-retroarch
…
desk-spotify
…
desk-ssh
…
desk-torbrowser
…
desk-virtualbox
…
desk-zoom
…
dev-base-devel
…
dev-fakeroot
…
dev-gcc
…
dev-git
…
dev-java
…
dev-locales
…
dev-make
…
dev-nodejs
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-npm
…
dev-python-pip
…
dev-python-yaml
…
dev-shell
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
dev-yay
Refactor yay update handling:
2025-09-29 09:16:02 +02:00
docker-compose
…
docker-container
…
drv-epson-multiprinter
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-intel
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
drv-lid-switch
…
drv-non-free
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
gen-hunspell
…
pkgmgr
…
pkgmgr-install
…
svc-ai-ollama
…
svc-bkp-loc-2-usb
…
svc-bkp-rmt-2-loc
…
svc-db-mariadb
…
svc-db-memcached
…
svc-db-openldap
Changed bitnami images to legacy. See https://github.com/bitnami/containers/issues/83267.
2025-10-02 07:31:20 +02:00
svc-db-postgres
feat(services): add CPU/RAM/PIDs defaults for heavy roles and align service names
2025-09-23 21:43:50 +02:00
svc-db-redis
…
svc-net-wireguard-core
…
svc-net-wireguard-firewalled
…
svc-net-wireguard-plain
…
svc-opt-keyboard-color
…
svc-opt-ssd-hdd
…
svc-opt-swapfile
Install swapfile tool correct
2025-09-25 13:16:13 +02:00
svc-prx-openresty
…
sys-bkp-provider
…
sys-bkp-provider-user
…
sys-cli
…
sys-ctl-alm-compose
…
sys-ctl-alm-email
…
sys-ctl-alm-telegram
…
sys-ctl-bkp-docker-2-loc
…
sys-ctl-cln-anon-volumes
…
sys-ctl-cln-bkps
…
sys-ctl-cln-certs
…
sys-ctl-cln-disc-space
…
sys-ctl-cln-faild-bkps
…
sys-ctl-hlth-btrfs
…
sys-ctl-hlth-csp
…
sys-ctl-hlth-disc-space
…
sys-ctl-hlth-docker-container
…
sys-ctl-hlth-docker-volumes
…
sys-ctl-hlth-journalctl
…
sys-ctl-hlth-msmtp
…
sys-ctl-hlth-webserver
…
sys-ctl-mtn-cert-deploy
…
sys-ctl-mtn-cert-renew
…
sys-ctl-rpr-btrfs-balancer
…
sys-ctl-rpr-docker-hard
…
sys-ctl-rpr-docker-soft
…
sys-daemon
…
sys-dns-cloudflare-records
…
sys-dns-hetzner-rdns
…
sys-dns-wildcards
…
sys-front-inj-all
…
sys-front-inj-css
…
sys-front-inj-desktop
…
sys-front-inj-javascript
refactor(webserver): rename roles and update references
2025-09-26 19:34:42 +02:00
sys-front-inj-logout
…
sys-front-inj-matomo
…
sys-hostname
…
sys-lock
…
sys-postfix
…
sys-service
…
sys-stk-back-stateful
…
sys-stk-back-stateless
…
sys-stk-front-base
…
sys-stk-front-proxy
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
sys-stk-full-stateful
feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack
2025-09-22 18:40:20 +02:00
sys-stk-full-stateless
…
sys-stk-semi-stateless
Fix semi-stateless run_once label and load both docker-compose & openresty handlers
2025-09-26 22:09:39 +02:00
sys-sudo
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
sys-svc-cdn
…
sys-svc-certbot
…
sys-svc-certs
…
sys-svc-cln-domains
…
sys-svc-dns
…
sys-svc-docker
…
sys-svc-journalctl
…
sys-svc-letsencrypt
…
sys-svc-msmtp
…
sys-svc-proxy
proxy(cors): make ACAO opt-in; remove hardcoded default
2025-10-02 08:57:14 +02:00
sys-svc-rdbms
…
sys-svc-sshd
…
sys-svc-webserver-core
Nextcloud/Talk: add Janus config & fix WebSocket proxying
2025-09-30 11:14:15 +02:00
sys-svc-webserver-https
…
sys-timer
…
sys-timer-cln-bkps
refactor!: replace sys-systemctl with sys-service, add sys-daemon, and rename systemctl_* → system_service_* across repo
2025-08-19 15:00:44 +02:00
sys-util-csp-cert
…
update-apt
…
update-compose
Refactor yay update handling:
2025-09-29 09:16:02 +02:00
update-pacman
…
user
THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs
2025-08-15 15:15:48 +02:00
user-administrator
…
user-root
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-browser
…
util-desk-design
…
util-desk-dev-arduino
…
util-desk-dev-core
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-dev-java
…
util-desk-dev-php
…
util-desk-dev-python
…
util-desk-dev-shell
…
util-desk-game-compose
…
util-desk-game-os
…
util-desk-game-windows
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
util-desk-office
…
util-dev-admin
…
util-dev-admin-network
…
util-srv-corporate-identity
…
web-app-akaunting
…
web-app-baserow
…
web-app-bigbluebutton
Deactivated recording for Big Blue Button
2025-09-29 15:23:48 +02:00
web-app-bluesky
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-app-bookwyrm
…
web-app-bridgy-fed
Refactor docker-compose templates: replace {% include 'build.yml.j2' %} with lookup() + indent for proper YAML embedding. Also adjusted build.yml.j2 to remove leading spaces. See: https://chatgpt.com/share/68ce584a-a430-800f-8e2a-0f96884cc8d1
2025-09-20 09:31:49 +02:00
web-app-chess
…
web-app-confluence
…
web-app-desktop
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-app-discourse
…
web-app-elk
…
web-app-espocrm
EspoCRM role: custom image + single data volume + runtime flag setter
2025-10-01 14:08:09 +02:00
web-app-flowise
…
web-app-friendica
…
web-app-funkwhale
…
web-app-fusiondirectory
…
web-app-gitea
…
web-app-gitlab
…
web-app-jenkins
…
web-app-jira
…
web-app-joomla
…
web-app-keycloak
…
web-app-lam
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
web-app-listmonk
…
web-app-magento
…
web-app-mailu
…
web-app-mastodon
…
web-app-matomo
…
web-app-matrix
…
web-app-mediawiki
…
web-app-mig
…
web-app-minio
Added correct minio http statuscodes
2025-09-29 17:29:29 +02:00
web-app-mobilizon
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-moodle
Changed bitnami images to legacy. See https://github.com/bitnami/containers/issues/83267.
2025-10-02 07:31:20 +02:00
web-app-navigator
…
web-app-nextcloud
Nextcloud: refactor Talk → HPB, switch to bridge mode, and template cleanups
2025-09-30 12:52:15 +02:00
web-app-oauth2-proxy
…
web-app-openproject
…
web-app-openwebui
…
web-app-peertube
Fix PeerTube OIDC plugin automation
2025-10-01 14:23:07 +02:00
web-app-pgadmin
…
web-app-phpldapadmin
…
web-app-phpmyadmin
…
web-app-pixelfed
refactor(ansible): normalize include_role syntax and unify host config paths via path_join
2025-09-22 14:55:25 +02:00
web-app-postmarks
…
web-app-pretix
…
web-app-roulette-wheel
…
web-app-snipe-it
…
web-app-socialhome
…
web-app-sphinx
…
web-app-syncope
…
web-app-taiga
Add healthchecks for all Taiga services, fix RabbitMQ env var names, and define TAIGA_HOSTNAME
2025-09-29 17:09:42 +02:00
web-app-wordpress
Add healthchecks for all Taiga services, fix RabbitMQ env var names, and define TAIGA_HOSTNAME
2025-09-29 17:09:42 +02:00
web-app-xwiki
…
web-app-yourls
…
web-opt-rdr-domains
…
web-opt-rdr-www
…
web-svc-asset
…
web-svc-cdn
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-collabora
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-coturn
Solved coturn volume bug
2025-09-29 15:33:50 +02:00
web-svc-file
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-html
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-legal
Optimized path building
2025-09-30 16:36:28 +02:00
web-svc-libretranslate
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-svc-logout
CORS/CSP hardening & centralization
2025-09-29 12:23:58 +02:00
web-svc-simpleicons
Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.
2025-09-30 17:22:28 +02:00
web-svc-xmpp
…
__init__.py
…
.gitignore
…
categories.yml
…
glosar.rst
…
index.rst
…