Sys-front-inj-javascript Role¶
Description: Global JavaScript injection layer for NGINX HTML responses via sub_filter, with CSP hashing
Variables¶
author: Kevin Veen-Birkenbach
description: Global JavaScript injection layer for NGINX HTML responses via sub_filter, with CSP hashing
company: Kevin Veen-Birkenbach https://www.veen.world
license: Infinito.Nexus Community License (Non-Commercial)
min_ansible_version: 2.9
platforms: [{‘name’: ‘ArchLinux’, ‘versions’: [‘all’]}, {‘name’: ‘Debian’, ‘versions’: [‘all’]}, {‘name’: ‘EL’, ‘versions’: [‘all’]}, {‘name’: ‘Fedora’, ‘versions’: [‘all’]}, {‘name’: ‘Ubuntu’, ‘versions’: [‘all’]}]
galaxy_tags: [‘nginx’, ‘javascript’, ‘csp’, ‘sub_filter’, ‘injection’, ‘global’]
issue_tracker_url: https://s.infinito.nexus/issues
README¶
Global JavaScript Injector for NGINX¶
Description¶
This Ansible role injects a custom JavaScript snippet into all HTML
responses served by NGINX. It leverages NGINX’s sub_filter to
seamlessly insert your application-specific script just before the
closing </head> tag, ensuring that your code runs on every page
load, which is useful for global feature flags, analytics, or UI
enhancements.
Overview¶
This role injects a custom JavaScript snippet into Nginx-served HTML responses via sub_filter.
Cosmos¶
The diagram places Global JavaScript Injector for NGINX in the Infinito.Nexus cosmos: the components it deploys (capabilities), the central services it consumes (dependencies), and its outward reach (federation and bridged external networks).
flowchart LR
subgraph role [sys-front-inj-javascript 💻]
svc_javascript["javascript"]
endSolid 1:1 edges are fixed relationships; dashed 0..1 edges are
conditional (enabled only in matching deployments); red 0..0 edges
are turned off in this role. Node markers show the role’s deploy modes
(💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly
turned off, and ⚙️ an Ansible role dependency declared in
meta/main.yml.
Features¶
- One-line Script InjectionCollapses your JavaScript into a single line and injects it via
sub_filterfor minimal footprint and maximal compatibility. - Easy CSP IntegrationAutomatically computes and appends a CSP hash entry for your script, so you can lock down Content Security Policy without lifting a finger.
- Conditional ActivationActivates only when you enable the
javascriptfeature for a given application, keeping your server blocks clean and performant. - Debug ModeSupports an
MODE_DEBUGflag that appends optionalconsole.logstatements for easier troubleshooting in staging or development.
Credits¶
Implemented by Kevin Veen-Birkenbach. Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).