digitalboard.core/roles
Simon Bärlocher fb81f60f9d
fix(opnform): drop production-looking secrets from defaults
opnform_app_key, opnform_jwt_secret, opnform_front_api_secret and
opnform_db_password shipped as real base64 strings in defaults — they
look like production secrets that just happen to be public. Set all
four to '' and rely on the existing Validate task (and the new
argument_specs marking them required) to fail fast when an inventory
forgets to override them.

Mirror the docstring comment to show how to generate each one with
openssl.
2026-05-26 14:58:18 +02:00
..
389ds feat: add 389ds ldap backend to keycloak 2026-03-13 10:58:40 +01:00
authentik feat: add blueprints for authentik ldap outpost and render values directly instead of using env vars 2026-04-10 14:33:52 +02:00
authentik_outpost_ldap feat: add blueprints for authentik ldap outpost and render values directly instead of using env vars 2026-04-10 14:33:52 +02:00
base fix: add lock_timout to apt cache update 2026-01-14 17:36:07 +01:00
collabora chore: ensure we can use the same collabora instance for multiple cloud instances 2026-03-06 17:00:33 +01:00
drawio feat: add drawio instance for nextcloud and opencloud 2026-03-13 14:37:02 +01:00
garage fix: ensure unredacted secret is used for s3-keys 2026-01-15 16:51:19 +01:00
homarr refactor(homarr): extract layout packing to filter plugin 2026-05-19 11:19:29 +02:00
httpbin feat: add basic httpbin services 2025-11-07 11:57:45 +01:00
keycloak feat: opencloud group provisioning via oidc 2026-03-13 16:43:02 +01:00
nextcloud feat: make nextcloud_notify_push_image configurable 2026-04-10 11:18:28 +02:00
opencloud fix: leading space in extra networks 2026-04-10 14:34:15 +02:00
opnform fix(opnform): drop production-looking secrets from defaults 2026-05-26 14:58:18 +02:00
traefik chore(traefik): prefix all traefi vars with traefik_ 2026-01-22 17:29:56 +01:00