feat(roles/php): allow for PHP-FPM pools to be configured individually.#248

Open

ebuerki-lf wants to merge 62 commits into

mainfrom

feat/php_fpm_pool

Commits on May 12, 2026

feat(roles/php): update template for RedHat-based systems, Docs (partially finished) to allow for multiple PHP-FPM pools to be configured individually
ebuerki-lf
committed

Commits on May 26, 2026

Add roles/repo_google_chrome

danyalberchtoldlf
authored and
ebuerki-lf
committed
Add roles/google_chrome

danyalberchtoldlf
authored and
ebuerki-lf
committed
fix(roles/icingaweb2_module_pdfexport): wire to chrome-headless service

danyalberchtoldlf
authored and
ebuerki-lf
committed
docs(roles/google_chrome): explain why systemd-socket-proxyd is needed in front of Chrome

danyalberchtoldlf
authored and
ebuerki-lf
committed
fix(roles/google_chrome): also set systemd_socket_proxyd_bind_any boolean

danyalberchtoldlf
authored and
ebuerki-lf
committed
refactor(roles/google_chrome): drop migration-specific handler logic

danyalberchtoldlf
authored and
ebuerki-lf
committed
feat(roles/repo_google_chrome): add meta/argument_specs.yml

danyalberchtoldlf
authored and
ebuerki-lf
committed
refactor(roles/google_chrome): tighten handler flow and tag boundaries

danyalberchtoldlf
authored and
ebuerki-lf
committed
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 (#251)

dependabot[bot]
authored and
ebuerki-lf
committed
refactor(roles/google_chrome): rename systemd units and wire CRB repo

NavidSassan
authored and
ebuerki-lf
committed
refactor(roles/chromium_headless): replace google_chrome with EPEL chromium-headless

NavidSassan
authored and
ebuerki-lf
committed
fix(roles/chromium_headless): keep Chromium debugging port bound to localhost

NavidSassan
authored and
ebuerki-lf
committed
style(roles/chromium_headless): align defaults order and internal naming with example

NavidSassan
authored and
ebuerki-lf
committed
docs(changelog): condense chromium_headless and pdfexport entries

NavidSassan
authored and
ebuerki-lf
committed
docs(contributing): list chromium_headless under roles with special features

NavidSassan
authored and
ebuerki-lf
committed
style(roles/icingaweb2_module_pdfexport): silence risky-file-permissions on temp-file tasks

NavidSassan
authored and
ebuerki-lf
committed
feat(roles/chromium_headless): add Debian support

NavidSassan
authored and
ebuerki-lf
committed
fix(roles/redis): add missing vars for Debian

NavidSassan
authored and
ebuerki-lf
committed
docs(compatibility): correct chromium_headless tested platforms

NavidSassan
authored and
ebuerki-lf
committed
feat(roles/graylog_datanode, roles/graylog_server): add template for Graylog 7.1

bhatti-lf
authored and
ebuerki-lf
committed
fix(roles/keycloak): run kc.sh build as keycloak user

jihan-lf
authored and
ebuerki-lf
committed
feat(roles/keycloak): auto-remove bootstrap admin credentials after first run

jihan-lf
authored and
ebuerki-lf
committed
style(roles/keycloak): improve state file handling and variable naming

NavidSassan
authored and
ebuerki-lf
committed
docs(roles/motd): update default value of motd__legal_notice
ebuerki-lf
committed
fix(roles/nodejs): support switching module stream

bhatti-lf
authored and
ebuerki-lf
committed
docs(roles/network): hint towards checking connection name

bhatti-lf
authored and
ebuerki-lf
committed
fix(roles/blocky): ensure blocky service is restarted after updating the binary
ebuerki-lf
committed
fix(roles/graylog_server): fix input creation failure by removing a deprecated property

bhatti-lf
authored and
ebuerki-lf
committed
fix(roles/graylog_server): enforce a key marked as mandatory in the role readme

bhatti-lf
authored and
ebuerki-lf
committed
docs(roles/graylog_server): specify where to get input types from

bhatti-lf
authored and
ebuerki-lf
committed
fix(roles/graylog_server): fix "conditional result was of type str" deprecation warning

bhatti-lf
authored and
ebuerki-lf
committed
feat(roles/redis): raise net.core.somaxconn default to 4096

markuslf
authored and
ebuerki-lf
committed
docs(roles): standardize role README structure across the fleet

NavidSassan
authored and
ebuerki-lf
committed
docs(roles/acme_sh): fix indentation

NavidSassan
authored and
ebuerki-lf
committed
fix(roles): enable CRB and EPEL

jihan-lf
authored and
ebuerki-lf
committed
fix(playbooks): address review on CRB/EPEL enablement

NavidSassan
authored and
ebuerki-lf
committed
chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0

dependabot[bot]
authored and
ebuerki-lf
committed
chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 (#255)

dependabot[bot]
authored and
ebuerki-lf
committed
chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (#256)

dependabot[bot]
authored and
ebuerki-lf
committed
docs(roles/alternatives): fix whitespace

NavidSassan
authored and
ebuerki-lf
committed
fix(roles/influxdb): always install `curl`

NavidSassan
authored and
ebuerki-lf
committed
feat(roles/repo_baseos): add Rocky security repo, enabled by default

bhatti-lf
authored and
ebuerki-lf
committed
docs(contributing): improve content

NavidSassan
authored and
ebuerki-lf
committed
fix(roles/mariadb_server): add mariadb_server__cnf_innodb_snapshot_isolation variable (mariadb 10.6+), defaulting to 'on'
ebuerki-lf
committed
fix(roles/repo_*): only write basic-auth credentials when a custom mirror URL is set

NavidSassan
authored and
ebuerki-lf
committed
fix(roles/kernel_settings): actually apply systemd_cpu_affinity setting

markuslf
authored and
ebuerki-lf
committed
chore: remove leftover particle/Vagrantfile

markuslf
authored and
ebuerki-lf
committed
Add plugin unit-test infrastructure + combine_lod fixes (#264)

markuslf
authored and
ebuerki-lf
committed
refactor(plugins): unify bitwarden family and add unit tests (#265)

markuslf
authored and
ebuerki-lf
committed
fix(plugins): make ansible-doc render all in-house plugins + add guard (#267)

markuslf
authored and
ebuerki-lf
committed
refactor(plugins): unify uptimerobot family and add unit tests (#268)

markuslf
authored and
ebuerki-lf
committed
refactor(plugins): unify nextcloud/sqlite/gpg_key/ipa_diff + safe fixes + tests (#269)

markuslf
authored and
ebuerki-lf
committed
fix(plugins/modules/sqlite_query): fail the task on a failed query (#270)

markuslf
authored and
ebuerki-lf
committed
fix(plugins/modules/bitwarden_item): honor check mode and preserve password on None (#271)

markuslf
authored and
ebuerki-lf
committed
fix(plugins/modules/nextcloud_occ_app_config): compare array values as JSON (#272)

markuslf
authored and
ebuerki-lf
committed
fix(plugins/modules/gpg_key): refresh vendored python-gnupg and correct docs

markuslf
authored and
ebuerki-lf
committed
feat(roles/php): update template for RedHat-based systems, Docs (partially finished) to allow for multiple PHP-FPM pools to be configured individually
ebuerki-lf
committed