Files
computer-playbook/roles/web-app-openproject
Kevin Veen-Birkenbach c0e26275f8 Refactor defaults generation, credential creation, and inventory management
### Overview
This commit introduces a broad set of improvements across the defaults
generator, credential creation subsystem, inventory creation workflow,
and InventoryManager core logic.

### Major Changes
- Support empty or  config/main.yml in defaults generator and ensure that
  applications with empty configs are still included in defaults_applications.
- Add '--snippet' and '--allow-empty-plain' modes to create/credentials.py
  with non-destructive merging and correct plain-secret handling.
- Ensure empty strings for 'plain' credentials are never encrypted.
- Update InventoryManager to fully support allow_empty_plain and prevent
  accidental overwriting or encrypting existing VaultScalar or dict values.
- Add full-size implementation of cli/create/inventory.py including
  dynamic inventory building, role filtering, host_vars management, and
  parallelised credential snippet generation.
- Fix schemas (Magento, Nextcloud, OAuth2-Proxy, keyboard-color, etc.) to
  align with the new credential model and avoid test failures.
- Improve get_app_conf consistency by ensuring credentials.* paths are
  always resolvable for applications even when config/main.yml is empty.

### Added Test Coverage
- Unit tests for defaults generator handling empty configs.
- Full test suite for create/inventory.py including merge logic and
  vault-safe host_vars loading.
- Extensive tests for InventoryManager: plain-secret behavior,
  vault handling, and recursion logic.
- Update or remove outdated tests referencing old schema behaviour.

### Context
This commit is associated with a refactoring and debugging session documented here:
https://chatgpt.com/share/692ec0e1-5018-800f-b568-d09a53e9d0ee
2025-12-02 11:54:55 +01:00
..

OpenProject

Description

Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.

Overview

Designed for simplicity, this role automates everything needed to run OpenProject in a containerized environment. It configures essential services such as the application itself, a PostgreSQL database, reverse proxy, and optional LDAP integration for identity management.

Purpose

The purpose of this role is to reduce the complexity of setting up OpenProject with modern productionready defaults. By combining Docker Compose and Ansible automation, it enables a handsoff setup for both small teams and larger internal infrastructures.

Features

  • Work Package Management:
    Create, assign, track, and prioritize tasks and issues with customizable workflows that keep your project organized and on schedule.

  • Gantt Charts & Timelines:
    Visualize project schedules and dependencies using intuitive Gantt charts and timeline views, enabling effective planning and resource allocation.

  • Agile Boards & Scrum/Kanban Integration:
    Manage agile projects using Scrum or Kanban boards, track progress through sprints, and maintain a clear overview of work in progress.

  • Time Tracking & Cost Management:
    Record time spent on tasks to monitor productivity and generate detailed cost reports to manage budgets effectively.

  • Collaboration & Document Management:
    Facilitate team collaboration with built-in discussion forums, document sharing, and version control, ensuring all project documentation remains up to date.

  • Robust Reporting & Dashboards:
    Gain insights through comprehensive reporting features and customizable dashboards that help monitor project performance and key metrics.

  • Custom Plugins & Extensibility:
    Extend functionality with a wide variety of plugins and integrations, or create your own to tailor OpenProject to your unique workflow.

  • Role-Based Access Control & Security:
    Manage user permissions precisely to ensure that sensitive information and critical functions remain secure.

Developer Notes

See the Development.md file for how to inspect and modify live settings inside the container, including full LDAP and SMTP configuration via the Rails console.

Credits 📝

Developed and maintained by Kevin Veen-Birkenbach
Learn more at www.veen.world

Part of the Infinito.Nexus Project
License: Infinito.Nexus NonCommercial License