c3cf779532
- Refactor: collapse `*_domain` + `*_extra_domains` into a single `*_domains` list across authentik, collabora, garage and nextcloud roles. First entry is the canonical FQDN (used for OVERWRITEHOST, BASE_URL, notify_push setup and garage root_domain). - Authentik blueprint: guard the OAuth sources block so an empty `authentik_login_sources` no longer renders an invalid YAML key. - Nextcloud: introduce `nextcloud_collabora_public_domain` and set Collabora's `public_wopi_url` separately from the server-to-server `wopi_url` so browsers can reach Collabora via the public name while Nextcloud still talks to it on the internal one. - Nextcloud: URL-encode the postgres user/password in DATABASE_URL.
39 lines
No EOL
1.3 KiB
YAML
39 lines
No EOL
1.3 KiB
YAML
#SPDX-License-Identifier: MIT-0
|
|
---
|
|
# defaults file for collabora
|
|
|
|
# Base directory configuration (inherited from base role or defined here)
|
|
docker_compose_base_dir: /etc/docker/compose
|
|
docker_volume_base_dir: /srv/data
|
|
|
|
# Collabora-specific configuration
|
|
collabora_service_name: collabora
|
|
collabora_docker_compose_dir: "{{ docker_compose_base_dir }}/{{ collabora_service_name }}"
|
|
collabora_docker_volume_dir: "{{ docker_volume_base_dir }}/{{ collabora_service_name }}"
|
|
|
|
# Service configuration
|
|
# FQDNs the collabora router accepts. The first entry is the canonical
|
|
# domain; further entries cover internal *.int.* names used for
|
|
# server-to-server WOPI discovery.
|
|
collabora_domains:
|
|
- "office.local.test"
|
|
collabora_image: "collabora/code:latest"
|
|
collabora_port: 9980
|
|
collabora_extra_hosts: []
|
|
|
|
# Traefik configuration
|
|
collabora_traefik_network: "proxy"
|
|
collabora_use_ssl: true
|
|
|
|
# SSL verification for WOPI callbacks (set to false for self-signed certs)
|
|
collabora_ssl_verification: true
|
|
|
|
# Allowed WOPI host domains (Nextcloud, OpenCloud WOPI server, etc.)
|
|
# These domains are allowed to send WOPI requests to Collabora.
|
|
# Each entry is used as a regex pattern (dots are auto-escaped).
|
|
collabora_allowed_domains:
|
|
- "nextcloud.local.test"
|
|
|
|
# Domains allowed to embed Collabora in an iframe (Nextcloud, OpenCloud, etc.)
|
|
collabora_frame_ancestors:
|
|
- "nextcloud.local.test" |