From 37a56903f29072a173206c9373afa40eb153fdb8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jesko=20Ansch=C3=BCtz?= <jesko@linuxmuster.net>
Date: Thu, 26 Mar 2026 18:48:05 +0100
Subject: [PATCH] Set Chromium to allow third-party cookies

---
 ansible/README.md                                      |  2 ++
 ansible/roles/signage_display/tasks/main.yml           | 10 ++--------
 .../roles/signage_display/templates/morz-kiosk.json.j2 |  7 +++++++
 3 files changed, 11 insertions(+), 8 deletions(-)
 create mode 100644 ansible/roles/signage_display/templates/morz-kiosk.json.j2

diff --git a/ansible/README.md b/ansible/README.md
index 5dd174a..5fb54d7 100644
--- a/ansible/README.md
+++ b/ansible/README.md
@@ -17,3 +17,5 @@ Aktuell vorhanden:
 
 - `inventory.example.yml`
 - `site.yml` als Platzhalter-Playbook
+
+Die Rolle `signage_display` setzt `BlockThirdPartyCookies: false` global fuer Chromium, damit eingebettete WebUntis-Seiten auf den Playern korrekt laufen.
diff --git a/ansible/roles/signage_display/tasks/main.yml b/ansible/roles/signage_display/tasks/main.yml
index 281ac69..c8f714f 100644
--- a/ansible/roles/signage_display/tasks/main.yml
+++ b/ansible/roles/signage_display/tasks/main.yml
@@ -22,18 +22,12 @@
   become: true
 
 - name: Deploy Chromium kiosk policy (disables translate prompt and sets language)
-  ansible.builtin.copy:
+  ansible.builtin.template:
+    src: morz-kiosk.json.j2
     dest: /etc/chromium/policies/managed/morz-kiosk.json
     owner: root
     group: root
     mode: "0644"
-    content: |
-      {
-        "TranslateEnabled": false,
-        "SpellcheckEnabled": false,
-        "DefaultNotificationsSetting": 2,
-        "DefaultGeolocationSetting": 2
-      }
   become: true
   notify: Restart morz-kiosk
 
diff --git a/ansible/roles/signage_display/templates/morz-kiosk.json.j2 b/ansible/roles/signage_display/templates/morz-kiosk.json.j2
new file mode 100644
index 0000000..d53d907
--- /dev/null
+++ b/ansible/roles/signage_display/templates/morz-kiosk.json.j2
@@ -0,0 +1,7 @@
+{
+  "TranslateEnabled": false,
+  "SpellcheckEnabled": false,
+  "DefaultNotificationsSetting": 2,
+  "DefaultGeolocationSetting": 2,
+  "BlockThirdPartyCookies": false
+}