Fixes (#283)

* make readme of owncloud more clear
* clarify setup.sh
* make user23 an admin by default
* remove hard depenency on reg
* add completed message
* set more attributes on startup

Signed-off-by: Felix Bartels <felix@host-consultants.de>

* use cn instead of uid
* add config for owncloud phoenix ui and openid plugin
* add override for experimental feature endpoint
* import kweb-calendar.cfg
* experimental endpoint is yes/no
* grapi also needs the ability to run insecure
* grapi needs to resolve the domain, therefore needs to be in the web network

owncloud/.gitignore

@@ -0,0 +1,2 @@
+openidconnect
+phoenix

owncloud/99-ldap.sh

@@ -22,6 +22,10 @@ occ ldap:set-config s01 ldapBase ${LDAP_SEARCH_BASE}
 occ ldap:set-config s01 ldapUserFilter "(|(objectclass=kopano-user))"
 occ ldap:set-config s01 ldapLoginFilter "(&(|(objectclass=kopano-user))(uid=%uid))"
 occ ldap:set-config s01 ldapGroupFilter "(&(|(objectclass=kopano-group)))"
+occ ldap:set-config s01 ldapEmailAttribute "mail"
+occ ldap:set-config s01 ldapExpertUUIDUserAttr "entryuuid"
+occ ldap:set-config s01 ldapUserDisplayName "cn"
+occ ldap:set-config s01 ldapUserFilter "(|(objectclass=posixAccount))"
 occ ldap:set-config s01 ldapConfigurationActive 1
 
 /usr/bin/occ user:sync -m disable "OCA\User_LDAP\User_Proxy"

owncloud/README.md

@@ -10,9 +10,9 @@ Example:
 COMPOSE_FILE=docker-compose.yml:docker-compose.ports.yml:owncloud/owncloud.yml
 ```
 
-2. run `owncloud.sh` to create the required runtime variables in your `.env` file.
+2. change into the owncloud folder and run `owncloud.sh` to create the required runtime variables in your `.env` file.
 
-3. run `docker-compose up -d` and you will be able to log into `https://your-fqdn/owncloud`.
+3. change back into the root of the checkout and run `docker-compose up -d` and you will be able to log into `https://your-fqdn/owncloud`.
 
 ## Further tweaks
 

owncloud/config.json

@@ -0,0 +1,29 @@
+{
+  "server": "https://kopano.demo:2015/owncloud/",
+  "theme": "owncloud",
+  "version": "0.1.0",
+  "openIdConnect": {
+    "authority": "https://kopano.demo:2015/",
+    "client_id": "owncloud",
+    "client_secret": "owncloud",
+    "response_type": "id_token token",
+    "scope": "openid profile email"
+  },
+  "apps": [
+    "files"
+  ],
+  "menu": {
+    "items": [
+      {
+        "name": "Kopano Meet",
+        "url": "https://kopano.demo:2015/meet",
+        "iconMaterial": "hearing"
+      },
+      {
+        "name": "Kopano Webapp",
+        "url": "https://kopano.demo:2015/webapp/",
+        "iconMaterial": "transform"
+      }
+    ]
+  }
+}

owncloud/konnectd.config.php

@@ -0,0 +1,16 @@
+<?php
+$CONFIG = [
+  'loglevel' => 0,
+  'debug' => true,
+  'openid-connect' => [
+      'provider-url' => 'https://kopano.demo:2015',
+      'client-id' => 'ownCloud',
+      'client-secret' => 'ownCloud',
+      'loginButtonName' => 'kopano',
+      'autoRedirectOnLoginPage' => false,
+      'redirect-url' => 'https://kopano.demo:2015/owncloud/index.php/apps/openidconnect/redirect',
+      'mode' => 'email',
+      'search-attribute' => 'email',
+      'use-token-introspection-endpoint' => false
+  ],
+];

owncloud/owncloud-phoenix.yml

@@ -0,0 +1,8 @@
+version: "3.5"
+services:
+  owncloud:
+    volumes:
+      - ./owncloud/openidconnect/:/mnt/data/apps/openidconnect/
+      - ./owncloud/phoenix/:/mnt/data/apps/phoenix/
+      - ./owncloud/konnectd.config.php:/mnt/data/config/konnectd.config.php
+      - ./owncloud/config.json:/mnt/data/apps/phoenix/config.json

owncloud/owncloud.sh

@@ -4,8 +4,7 @@ set -euo pipefail
 IFS=$'\n\t'
 
 if ! command -v reg > /dev/null; then
-	echo "Please install reg in order to run this script."
-	exit 1
+	echo "Please install reg to list available tags. You can only press enter when being asked for a tag."
 fi
 
 if [ ! -e ../.env ]; then
@@ -33,7 +32,7 @@ random_string() {
 	hexdump -n 16 -v -e '/1 "%02X"' /dev/urandom
 }
 
-docker_tag_search () {
+docker_tag_search() {
 	image="$1"
 	results=$(reg tags "$image" 2> /dev/null)
 	echo "$results" | xargs -n1 | sort --version-sort -ru
@@ -63,7 +62,7 @@ selectWithDefault() {
 	[[ -n $index ]] && printf %s "${@: index:1}"
 }
 
-update_env_file () {
+update_env_file() {
 	varname="$1"
 	varvalue="$2"
 	if ! grep -q "$varname" ../.env; then
@@ -73,7 +72,7 @@ update_env_file () {
 	fi
 }
 
-tag_question () {
+tag_question() {
 	containername="$1"
 	value_default="$2"
 	description="$3"
@@ -94,6 +93,8 @@ update_env_file OWNCLOUD_ADMIN_USERNAME admin
 update_env_file OWNCLOUD_ADMIN_PASSWORD "$(random_string)"
 update_env_file MARIADB_ROOT_PASSWORD "$(random_string)"
 
+echo "Setup complete"
+
 if [ -e "$tmpfile" ]; then
 	rm "$tmpfile"
 fi