Kevin Veen-Birkenbach c182ecf516
Refactor and cleanup OIDC, desktop, and web-app roles
- Improved OIDC variable definitions (12_oidc.yml)
- Added account/security/profile URLs
- Restructured web-app-desktop tasks and JS handling
- Introduced oidc.js and iframe.js with runtime loader
- Fixed nginx.conf, LDAP, and healthcheck templates spacing
- Improved Lua injection for CSP and snippets
- Fixed typos (WordPress, receive, etc.)
- Added silent-check-sso nginx location

Conversation: https://chatgpt.com/share/68ae0060-4fac-800f-9f02-22592a4087d3
2025-08-26 20:44:05 +02:00

40 lines
1.2 KiB
YAML

oidc:
email_by_username: true # If true, then the mail is set by the username. If wrong then the OIDC user email is used
enable_user_creation: true # Users will be created if not existing
domain: "{{ SYSTEM_EMAIL.DOMAIN }}" # The main domain from which mails will be send \ email suffix behind @
features:
matomo: true
css: false
desktop: true
oidc: true
central_database: true
logout: true
server:
domains:
canonical:
- "{{ SYSTEM_EMAIL.HOST }}"
alias:
- "mailu.{{ PRIMARY_DOMAIN }}"
csp:
flags:
style-src:
unsafe-inline: true
script-src-elem:
unsafe-inline: true
script-src:
unsafe-inline: true
unsafe-eval: true
rbac:
roles:
mail-bot:
description: "Has an token to send and receive emails"
docker:
services:
redis:
enabled: true
database:
enabled: true
mailu:
version: "2024.06" # Docker Image Version
name: mailu