From 4cef67a91dda5e3bcd186bf80061de01bff76f06 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Julien=20Fastr=C3=A9?= Date: Thu, 11 Sep 2025 11:01:50 +0200 Subject: [PATCH] Add "managed by Ansible" notice to all template files Included comments at the top of all template files indicating that they are managed by Ansible and should not be edited manually. This ensures clarity and avoids unintended manual modifications. --- templates/compose.yaml | 2 ++ templates/config/prod/chill_doc_store.yaml | 1 + templates/config/prod/framework.yaml | 2 ++ templates/config/prod/lexik_jwt_authentication.yaml | 1 + templates/config/prod/messenger.yaml | 1 + templates/config/prod/monolog.yaml | 1 + templates/env_file.env | 1 + templates/postgres.env | 1 + templates/rabbitmq.env | 1 + templates/traefik-compose.yaml | 1 + 10 files changed, 12 insertions(+) diff --git a/templates/compose.yaml b/templates/compose.yaml index febb74b..c8c25db 100644 --- a/templates/compose.yaml +++ b/templates/compose.yaml @@ -1,3 +1,5 @@ +# This file is managed by ansible. Do not edit it by hand + services: frontend: image: {{ registry_url }}/{{ registry_project }}/{{ chill_image_nginx_name }}:{{ item.chill_image_tag }} diff --git a/templates/config/prod/chill_doc_store.yaml b/templates/config/prod/chill_doc_store.yaml index 5c5517a..79ebc7a 100644 --- a/templates/config/prod/chill_doc_store.yaml +++ b/templates/config/prod/chill_doc_store.yaml @@ -1,3 +1,4 @@ +# this file is managed by ansible. Do not edit it by hand chill_doc_store: use_driver: local_storage local_storage: diff --git a/templates/config/prod/framework.yaml b/templates/config/prod/framework.yaml index 4827806..0fb2cea 100644 --- a/templates/config/prod/framework.yaml +++ b/templates/config/prod/framework.yaml @@ -1,3 +1,5 @@ +# this file is managed by ansible. Do not edit it by hand + framework: trusted_proxies: '127.0.0.1,REMOTE_ADDR{% for ip in traefik_trusted_ips|default([]) %},{{ ip }}{% endfor %}' trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port'] diff --git a/templates/config/prod/lexik_jwt_authentication.yaml b/templates/config/prod/lexik_jwt_authentication.yaml index d17e32a..83e582a 100644 --- a/templates/config/prod/lexik_jwt_authentication.yaml +++ b/templates/config/prod/lexik_jwt_authentication.yaml @@ -1,3 +1,4 @@ +# this file is managed by ansible. Do not edit it by hand lexik_jwt_authentication: # in production, the secret must be located in an environment variable # for converting the file to a raw variable, use this command: diff --git a/templates/config/prod/messenger.yaml b/templates/config/prod/messenger.yaml index 04f95a0..856c9ab 100644 --- a/templates/config/prod/messenger.yaml +++ b/templates/config/prod/messenger.yaml @@ -1,3 +1,4 @@ +# this file is managed by ansible. Do not edit it by hand framework: messenger: transports: diff --git a/templates/config/prod/monolog.yaml b/templates/config/prod/monolog.yaml index f669738..b4d0bfe 100644 --- a/templates/config/prod/monolog.yaml +++ b/templates/config/prod/monolog.yaml @@ -1,3 +1,4 @@ +# this file is managed by ansible. Do not edit it by hand parameters: log_prefix: {{ item.chill_environment }} monolog: diff --git a/templates/env_file.env b/templates/env_file.env index 08b597b..b7992a8 100644 --- a/templates/env_file.env +++ b/templates/env_file.env @@ -1,3 +1,4 @@ +# This file is managed by ansible. Do not edit it by hand APP_ENV=prod APP_DEBUG=false TRUSTED_PROXIES=10.0.0.0/8,192.168.0.0/16,172.16.0.0/16 diff --git a/templates/postgres.env b/templates/postgres.env index 0483cf6..b5b06f2 100644 --- a/templates/postgres.env +++ b/templates/postgres.env @@ -1,3 +1,4 @@ +# this file is managed by ansible. Do not edit it by hand POSTGRES_DB={{ item.chill_config.database_name }} POSTGRES_USER={{ item.chill_config.database_user }} POSTGRES_PASSWORD={{ item.chill_config.database_password }} diff --git a/templates/rabbitmq.env b/templates/rabbitmq.env index b77ad08..f288e2f 100644 --- a/templates/rabbitmq.env +++ b/templates/rabbitmq.env @@ -1,2 +1,3 @@ +# this file is managed by ansible. Do not edit it by hand. RABBITMQ_DEFAULT_USER={{ item.chill_config.rabbitmq_user }} RABBITMQ_DEFAULT_PASS={{ item.chill_config.rabbitmq_password }} \ No newline at end of file diff --git a/templates/traefik-compose.yaml b/templates/traefik-compose.yaml index 4f603c3..7b0797a 100644 --- a/templates/traefik-compose.yaml +++ b/templates/traefik-compose.yaml @@ -1,3 +1,4 @@ +# this file is managed by ansible. Do not edit it by hand. services: reverse-proxy: # The official v3 Traefik docker image