TODO

• tasks/01_admin.yml realigns the declared administrator password on every deploy, so INITIAL_ADMIN_PW is only still needed for the very first installation. The backend image hands it to kix.Console.pl Admin::User::SetPassword admin as a command argument (/usr/local/bin/docker-entrypoint.sh line 194), so the value is part of the process argument list inside the backend container while that installation runs. Cause: upstream entrypoint, the console command Admin::User::SetPassword takes the password as an argument only. Options: find out what install_kix() stores when INITIAL_ADMIN_PW is unset and drop the variable from templates/env.j2 if the realign covers it; or report it upstream.

• Behind the front proxy every object icon the app loads by URL is a broken image, among them the header logo as soon as the object icon agent-portal-logo exists. The frontend serves such an icon at /objecticons/<id>/image%2Fpng (route /objecticons/:iconId/:contentType), and the request reaches it with the encoded slash decoded, so the route does not match and the application document answers. Measured from inside the stack without a session: http://127.0.0.1:8083/objecticons/1/image%2Fpng (the role’s own proxy) answers 200, http://127.0.0.1:8083/objecticons/1/image/png answers 302 and https://kix.infinito.test/objecticons/1/image%2Fpng answers 302; signed in, the header logo URL answered 200 with text/html and 86854 bytes. Cause: the front proxy vhost normalises the request path, shared code outside this role. Until that is fixed the role stylesheet carries the header logo from the CDN (#kix-header #logo in files/style.css). Options: hand the request URI to this app unchanged in the front proxy and then drop that stylesheet rule; or keep the rule.

• On a fresh instance the object icons agent-portal-logo and agent-portal-icon do not exist: before the design import the sign-in page and the header served /static/img/kix_default.png as logo and favicon, the fallback of the frontend. The backend console offers Admin::ObjectIcon::Import and Admin::ObjectIcon::SyncAllToFS only, so tasks/02_design.yml can write an icon but not delete one. With design switched off again the role therefore imports the images the frontend ships as its seed (/opt/kix/static/img/kix_start.png, kix_start_icon.png) over the icons it marked, instead of returning to the state without icons. Options: delete the two icons through the backend’s Perl API (Kernel::System::ObjectIcon) in that case; or keep the seed images.