+vault_mount_paths

Vault part is OK by adding apps to vault_mount_paths.

Simplify Vault path by bypassing this prefix thing

Vault policy

We still use that for rNOTIF and rGROVE AFAIK, so I provisioned their secrets in Vault at apps/notifications-center/dockerhub/

Last tweaks, e.g. read durable parameters and adjust permissions like currently deployed

declare wearg-notifications as durable

So if someone needs more recent ICU, the cleaner way would be a custom Bullseye build of the icu source package. We'll include it in packages.nasqueron.org, and from there, the repository can then be used in the image both for libxml2 and PHP itself.

"Fun" fact: libxml requires libicu, and pulls the system one of course:

Debian images will lag too much, review https://icu.unicode.org/download, we're at 71, Debian Bullseye is stuck at 67.

For shellserver and devserver role, the intl extension is already installed, per bdd61c48. MediaWiki is quoted as example of application using it.

Pro tip: even in a data provider, you can format the arrays to help to read them.

Trim EOF

Current status: Airflow works, Sentry works.

No more warning 🎉 🎊