kevinveenbirkenbachandClaude Opus 5.5 bfdf88fae0 fix(domains): read an application's domains where the cache puts them ...

meta/domains.yml lands on the top-level `domains` key of the merged
application, yet three readers still looked under `server.domains`,
which no role fills any more:

- current_play_redirect_domains built every mapping from an empty
  config, so each app redirected to itself and was dropped. Neither
  `domains.aliases` nor AUTO_BUILD_ALIASES produced a single redirect,
  and echoserver's update check listed nextcloud.infinito.nexus and the
  other entity domains as dropped by the upgrade.
- csp_skip_domains never found the canonical of a disabled service.
- the logout filter's fallback returned no domains.

The unit tests fed the old layout and passed regardless. They now use
the merged one, and a new test builds the redirect from keycloak's real
role defaults.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-22 22:18:07 +02:00

..

cli

feat(web-app-erpnext): set up the service provider's company and its accounting basics

2026-10-22 20:52:30 +02:00

group_vars

test(wireguard): the layer follows group membership

2026-10-16 21:26:17 +02:00

library

fix(database_query): keep psql's command tags out of the returned rows

2026-10-22 20:36:32 +02:00

plugins

fix(domains): read an application's domains where the cache puts them

2026-10-22 22:18:07 +02:00

roles

fix(domains): read an application's domains where the cache puts them

2026-10-22 22:18:07 +02:00

scripts

fix(apparmor): keep docker-default loaded when tearing AppArmor down

2026-10-20 12:11:14 +02:00

utils

feat(playbooks/update): pull the images of the deploy before the upgrade window

2026-10-22 21:30:18 +02:00

__init__.py

…