mirror of
				https://github.com/kevinveenbirkenbach/computer-playbook.git
				synced 2025-11-03 19:58:14 +00:00 
			
		
		
		
	- Normalize domain blocks across apps:
  - Add explicit 'aliases: []' everywhere (no implicit aliases)
  - Standardize canonical subdomains for consistency:
    * Bluesky: web/api under *.bluesky.<PRIMARY_DOMAIN>
    * EspoCRM: espo.crm.<PRIMARY_DOMAIN>
    * Gitea:   tea.git.<PRIMARY_DOMAIN>
    * GitLab:  lab.git.<PRIMARY_DOMAIN>
    * Joomla:  joomla.cms.<PRIMARY_DOMAIN>
    * Magento: magento.shop.<PRIMARY_DOMAIN>
    * OpenProject: open.project.<PRIMARY_DOMAIN>
    * Pretix:  ticket.shop.<PRIMARY_DOMAIN>
    * Taiga:   kanban.project.<PRIMARY_DOMAIN>
  - Remove legacy/duplicate aliases and use empty list instead
  - Fix 'alias' -> 'aliases' where applicable
Context: preparing for AUTO_BUILD_ALIASES=False and deterministic redirect mapping.
Ref: conversation https://chatgpt.com/share/68cd512c-c878-800f-bdf2-81737adf7e0e
		
	
		
			
				
	
	
		
			34 lines
		
	
	
		
			1012 B
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			34 lines
		
	
	
		
			1012 B
		
	
	
	
		
			YAML
		
	
	
	
	
	
version:                  "latest"
 | 
						|
server_mode:              False                             # If true then the preconfigured database file is loaded. Recommended False. True is a security risk.
 | 
						|
master_password_required: True                              # Master password is required. Recommended True. False is a security risk.
 | 
						|
oauth2_proxy:
 | 
						|
  application:            "application"
 | 
						|
  port:                   "80"
 | 
						|
  allowed_groups:
 | 
						|
    - "{{ [RBAC.GROUP.NAME, 'web-app-pgadmin-administrator'] | path_join }}"
 | 
						|
features:
 | 
						|
  matomo:                 true
 | 
						|
  css:                    true
 | 
						|
  desktop:                true
 | 
						|
  central_database:       true
 | 
						|
  oauth2:                 true
 | 
						|
  logout:                 true
 | 
						|
server:
 | 
						|
  csp:
 | 
						|
    flags:
 | 
						|
      style-src:
 | 
						|
        unsafe-inline: true
 | 
						|
      script-src-elem:
 | 
						|
        unsafe-inline: true
 | 
						|
    whitelist:
 | 
						|
      font-src:
 | 
						|
        - "data:"
 | 
						|
  domains:
 | 
						|
    canonical:
 | 
						|
      - pgadmin.{{ PRIMARY_DOMAIN }}
 | 
						|
    aliases: []
 | 
						|
docker:
 | 
						|
  services:
 | 
						|
    database:
 | 
						|
      enabled: true
 |