Digitalboard/digitalboard.core
6
2
Fork 0
Code Pull requests 1 Releases Packages Activity Actions
No description
119 commits 4 branches 0 tags 980 KiB
Find a file
Simon Bärlocher 518d80ec71
feat(services): multi-domain routing, split-horizon and OIDC hardening 
Bundle of cross-role changes for the gymb services deployment:

- Traefik routers: OR-combine opnform/homarr/bookstack Host rules with new
  *_extra_domains (internal *.int.* FQDNs for a DMZ reverseproxy), and emit
  tls.certresolver only when traefik_cert_mode == acme (drawio, homarr,
  opnform, send).
- Split-horizon: bookstack_extra_hosts / opnform_extra_hosts add container
  /etc/hosts overrides so containers reach the IdP public FQDN over the LAN.
- bookstack: assert the OIDC issuer resolves concretely (reject "//v2.0"),
  allowing non-Entra IdPs that override bookstack_oidc_issuer.
- homarr: derive the bcrypt salt from the password digest so the admin hash
  is idempotent — no spurious template changes / container restarts.
- opnform: PATCH an existing OIDC connection instead of skipping (applies
  corrected inventory on re-run); add OIDC_FORCE_LOGIN (enabled only after
  bootstrap) and an optional direct-SSO ingress entrypoint.

Docs: READMEs and meta/argument_specs.yml updated for all new variables.
2026-05-27 16:18:29 +02:00
meta chore: add empty collection skeleton 2025-08-20 10:33:28 +02:00
plugins feat(bookstack): add role for self-hosted BookStack deployment 2026-05-26 16:16:35 +02:00
roles feat(services): multi-domain routing, split-horizon and OIDC hardening 2026-05-27 16:18:29 +02:00
.gitignore Merge remote-tracking branch 'origin/main' 2026-05-20 12:41:52 +02:00
galaxy.yml feat(bookstack): add role for self-hosted BookStack deployment 2026-05-26 16:16:35 +02:00
README.md chore: add empty collection skeleton 2025-08-20 10:33:28 +02:00

README.md

Ansible Collection - digitalboard.core

Documentation for the collection.