Add "managed by Ansible" notice to all template files

Included comments at the top of all template files indicating that they are managed by Ansible and should not be edited manually. This ensures clarity and avoids unintended manual modifications.

templates/compose.yaml

@@ -1,3 +1,5 @@
+# This file is managed by ansible. Do not edit it by hand
+
 services:
     frontend:
         image: {{ registry_url }}/{{ registry_project }}/{{ chill_image_nginx_name }}:{{ item.chill_image_tag }}
@@ -46,6 +48,8 @@ services:
     consumer:
         <<: *defaultApp
         entrypoint: "/usr/bin/env"
+        environment:
+            CLEAR_CACHE: "false" # pre-generating the cache cause issue with permissions on the cache directory.
         command:
             - "/bin/bash"
             - "-c"
@@ -53,12 +57,7 @@ services:
               sleep 3 && bin/console cache:clear &&
               while ! [ -f /tmp/kill_me ];
               do
-              su -s /bin/bash -c 'php -d memory_limit=2G bin/console messenger:consume priority async --limit=20 --time-limit=600 -v' "$PHP_FPM_USER";
-              rc=$?;
-              if [ $rc -ne 0 ]; then
-                echo "Consumer exited with status $rc. Stopping container.";
-                exit $rc;
-              fi
+              su -s /bin/bash -c 'php -d memory_limit=2G bin/console messenger:consume priority async --limit=20 --time-limit=600 -v' "www-data";
               done;
         pre_stop:
             - command:

templates/config/prod/chill_doc_store.yaml

@@ -1,3 +1,4 @@
+# this file is managed by ansible. Do not edit it by hand
 chill_doc_store:
     use_driver: local_storage
     local_storage:

templates/config/prod/framework.yaml

@@ -1,3 +1,5 @@
+# this file is managed by ansible. Do not edit it by hand
+
 framework:
     trusted_proxies: '127.0.0.1,REMOTE_ADDR{% for ip in traefik_trusted_ips|default([]) %},{{ ip }}{% endfor %}'
     trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port']

templates/config/prod/lexik_jwt_authentication.yaml

@@ -1,3 +1,4 @@
+# this file is managed by ansible. Do not edit it by hand
 lexik_jwt_authentication:
     # in production, the secret must be located in an environment variable
     # for converting the file to a raw variable, use this command:

templates/config/prod/messenger.yaml

@@ -1,3 +1,4 @@
+# this file is managed by ansible. Do not edit it by hand
 framework:
     messenger:
         transports:

templates/config/prod/monolog.yaml

@@ -1,3 +1,4 @@
+# this file is managed by ansible. Do not edit it by hand
 parameters:
     log_prefix: {{ item.chill_environment }}
 monolog:

templates/env_file.env

@@ -1,3 +1,4 @@
+# This file is managed by ansible. Do not edit it by hand
 APP_ENV=prod
 APP_DEBUG=false
 TRUSTED_PROXIES=10.0.0.0/8,192.168.0.0/16,172.16.0.0/16

templates/postgres.env

@@ -1,3 +1,4 @@
+# this file is managed by ansible. Do not edit it by hand
 POSTGRES_DB={{ item.chill_config.database_name }}
 POSTGRES_USER={{ item.chill_config.database_user }}
 POSTGRES_PASSWORD={{ item.chill_config.database_password }}

templates/rabbitmq.env

@@ -1,2 +1,3 @@
+# this file is managed by ansible. Do not edit it by hand.
 RABBITMQ_DEFAULT_USER={{ item.chill_config.rabbitmq_user }}
 RABBITMQ_DEFAULT_PASS={{ item.chill_config.rabbitmq_password }}

templates/traefik-compose.yaml

@@ -1,3 +1,4 @@
+# this file is managed by ansible. Do not edit it by hand.
 services:
   reverse-proxy:
     # The official v3 Traefik docker image