kevinveenbirkenbachandClaude Opus 5.5 ef246a6e03 refactor(unit_name): build unit names from SYS_SERVICE_VERSION_SUFFIX ...

The lookup assembled '.<version>.<software domain>' itself, a second copy of the infix the unlock and prune phases now read from the SPOT. It reads SYS_SERVICE_VERSION_SUFFIX instead and refuses one that does not start with a dot or carries an empty segment. The direct version-plugin fallback goes with it: it existed because the plugin rendered the untrusted literal "{{ lookup('version') }}", while the SPOT arrives as a trusted group_vars string. Every unit name rendered from group_vars is byte-identical before and after.

The timer description names the versioned service it starts instead of the legacy unversioned name.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-23 23:34:13 +02:00

..

action

perf(web-opt-rdr-domains): check every certificate in one task and write every file in one call

2026-10-23 16:35:45 +02:00

filter

feat(web-opt-rdr-domains): redirect a whole legacy zone with one wildcard source

2026-10-23 20:17:19 +02:00

lookup

refactor(unit_name): build unit names from SYS_SERVICE_VERSION_SUFFIX

2026-10-23 23:34:13 +02:00

__init__.py

…