1
0
mirror of https://github.com/zokradonh/kopano-docker.git synced 2026-08-11 16:32:59 +00:00
Commit Graph

57 Commits

Author SHA1 Message Date
Felix Bartels d66c1a3df9 Prepare update of kopano-meet for Univention (#466)
* add kapps repo to base image to prevent from potentially updated components (for example kweb)
* kapps needs to be added to php image, not webapp image
* ignore unknown syntax for build time secrets
* update Konnect
2020-10-02 15:13:35 +02:00
Felix Bartels 93b4964f20 update konnect to latest upstream (#441)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-09-11 11:36:50 +02:00
Felix Bartels d514ef44cb implement new env variable to disable all automatic actions (#434)
* implement new env variable to disable all automatic actions

fixes https://github.com/zokradonh/kopano-docker/issues/360

* wrap the remaining services in checks if autoconfigure/disable_checks is used
* move definition of AUTOCONFIGURE variable into base image
* add logic to kapps and kdav container
* add autoconfigure to konnect container
* update build stage to latest golang
* add autoconfig to remaining images
* delete obsolete apache config in z-push folder
* when specifying config paths use KOPANO_CONFIG_PATH
* also use env variable in helper scripts
* add message about removal of kopano-cli
2020-08-28 09:48:32 +02:00
Felix Bartels 21781473f0 Update Konnect to 0.33.5 2020-06-30 13:32:58 +02:00
Felix Bartels de30561217 update Konnect (#418) 2020-06-24 10:02:21 +02:00
Felix Bartels 1120a8e08b update konnect (#404)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-06-03 14:12:35 +02:00
Felix Bartels 9bba2ec77e Make it possible to override the final exe (#392)
* move all env definition in same block
* implement EXE env variable for kopano-core
  * Obsoletes parts of https://github.com/zokradonh/kopano-docker/pull/366
* use EXE in konnect container
* add exe for web
* make it possible to docker-composer run commands in web container
2020-05-05 21:03:47 +02:00
Felix Bartels 734d3c61db Check if external authority is correctly configured (#390)
* check if oidc provider is reachable

Relates to https://github.com/zokradonh/kopano-docker/issues/376

Signed-off-by: Felix Bartels <felix@host-consultants.de>

* compare issuer in the discovery document with the configured one

Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-05-01 12:23:06 +02:00
Felix Bartels 3572fc74e7 Add parsing of signed_out_uri to konnect (#388)
Allow external configuration of --signed-out-uri in konnect

Signed-off-by: Felix Bartels <felix@host-consultants.de>

Co-authored-by: Erik Damrose <damrose@univention.de>
2020-04-30 13:59:06 +02:00
Felix Bartels 110ea43bf6 Rework label handling (#387)
* be smarter about labels

inspired by https://github.com/Peter-SAARLAND/zero
2020-04-28 22:16:12 +02:00
Felix Bartels a0c14b6ad4 add config registry settings for single logout (#385)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-04-22 12:50:59 +02:00
Felix Bartels 12f7f82648 Update to latest Konnect release (#383)
* newest konnect

Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-04-16 13:01:20 +02:00
Felix Bartels 13dad903c9 Update Konnect to 0.31.0 (#380) 2020-04-10 16:03:09 +02:00
Felix Bartels cfbc22d947 Add the ability to specify the client_id for external oidc providers 2020-04-08 08:35:44 +02:00
Felix Bartels 2eb025b86f more cases for updating the identifier registration (#378)
* update working copy on each step
2020-04-03 11:12:01 +02:00
Felix Bartels 51c6bb8fca rework "guest already configured check"
Instead of grepping for the guest key it now greps for the fqdn
make output yaml again

Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-04-01 08:02:34 +02:00
Felix Bartels 3f4a56a562 fix external authority support (#367)
* comment currently broken tests (because of read-only container)
* move initial creation out of guest or authority configuration
* instead of copying merge files into destination with slurp
* failsafe authority registration
2020-03-19 15:41:23 +00:00
Felix Bartels 4e9829f466 Improve Konnect wrapper script (#359)
* only enter guest mode config if the value is not in the identifier registration already
2020-03-16 15:09:24 -04:00
Felix Bartels da5d41c411 update konnect to latest (#356)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-03-09 20:41:29 +01:00
Felix Bartels 24f82964d4 pass --no-cache-dir to pip install (#340)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-02-22 10:21:51 +01:00
Felix Bartels 62837d0809 update konnect (#339)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-02-14 12:20:57 +01:00
Felix Bartels 1ac48eec52 update Konnect
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2020-01-27 12:06:42 +01:00
Felix Bartels 70e9940b38 Run all containers read-only (#314)
* switch containers in compose file to read-only
related to https://github.com/zokradonh/kopano-docker/issues/310
* make scheduler container read-only
* make meet container read-only
* fix konnect for read-only
* make core mostly read-only
* add custom location for ldap.cfg to default config
* sort config option for readability
* update makefile pull workaround
* make kdav read-only
* remove locale generation code from core startup
* fix commander tests
* fix store language tests
* add test for a dutch mailbox
* make it possible to run webapp read-only
* add locale hint to the compose file
* finish read-only mode for z-push
2020-01-14 14:31:53 +01:00
renovate[bot] 343730b9e1 Update golang Docker tag to v1.13.5 (#5)
Co-authored-by: Renovate Bot <renovatebot@gmail.com>
2020-01-06 14:07:25 +01:00
Felix Bartels d1e71c6a25 strip folders from fqdn in identifier registry (#306)
This change is required in case Konnect is running in a subfolder (and since clients like Meet are still accessible at /meet and not /subfolder/meet)
2019-12-13 08:04:44 +01:00
Felix Bartels b7a682d437 reduce size of konnect with multistage builds (#237)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-12-12 16:58:07 +01:00
Felix Bartels 4f8af8f86f update konnect (#299)
* update konnect to 0.28.0
* make signing_method configurable
* instruct npm to run with unsafe permissions (fixes error on jenkins)
  * https://github.com/npm/npm/issues/20861
2019-12-05 11:10:17 +01:00
Felix Bartels d7fb796fa3 split up installation for core and kapi+grapi (#293)
* split up installation for core and kapi+grapi
* add some debug output in case package installation fails
* let konnect run as nobody
* add code to check writing permissions for certificates and create certificates in container if possible
* add tests to check on failed and successful certificate creation
* add certificate creation logic from the konnect binfile
* add env for custom dockerize timeout (to fail earlier in tests)
2019-11-26 10:10:22 +01:00
Felix Bartels a0fdd5d984 add todo
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-11-22 12:05:49 +01:00
Felix Bartels 0130c9829f Move ecparam and eckey generation into guest mode if (#291)
move waiting for ecparam and eckey into the allow guest mode if as this is only required for the guest mode
2019-11-22 08:19:44 +01:00
Felix Bartels ead0acfdb0 Add a per setup unique machine-id (#257)
* add mount for machine-id
* services should check the availability of the machine id before starting
* add a note to the readme
* add new mounts to the multiserver example
* add dockerize to kweb
* fix meet demo
2019-11-19 13:55:11 +01:00
Felix Bartels 03c7154299 smaller konnect fixes (#288)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-11-17 16:35:57 +01:00
Felix Bartels df6268e24f bring back the possibillity to specify args (#284)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-11-13 09:44:00 +01:00
Felix Bartels 012d64d2bd bugfix wrongly used variable name for writing identifier registration
add test for identifier scopes conf

Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-11-11 12:47:17 +01:00
Felix Bartels 52d6b18322 Further tweaks for univention app (#264)
* add option to change base path
* fix env name
* add kweb configuration for using konnect in a subpath
* make webapp display configurable
* more explicit startup messages
* add ability to use an external oidc provider
* install the grapi ldap backend in the image when building with a recent enough kopano version
* add the ability to run test in the konnect container
  * the startup script gets more and more complicated, there should be a way to test it
* test some values and add test helper
* do not simply cat the registration, but call with yq
* update kweb and konnect
2019-11-11 10:54:54 +01:00
Felix Bartels 6ad012b234 ci: committing changes for konnect 2019-10-29 11:56:39 +01:00
Felix Bartels bcb0926c6d Misc changes (#268)
* fixes for setup-tools.sh

fixes https://github.com/zokradonh/kopano-docker/issues/266

* add startup tests for meet demo
* add architecture to contributing file
* define ical_listen for kopano-ical
* precreate database if it does not yet exist
* fix spelling
2019-10-22 15:00:31 +02:00
Felix Bartels 4fb98fb69c Only add guest mode configuration if guest mode is (#263)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-10-18 14:04:23 +02:00
Felix Bartels c057337097 Update Kweb, Konnect and Kwmserver to latest version (#239) 2019-09-11 13:20:39 +02:00
Felix Bartels 68c691acbd Adapt Konnect Container for Univention (#236)
* precreate meet keys in ssl, but do the actual action in konnect
* generate all keys for meet within Konnect
* incorporate explicit logging and settings set by ucs app
* make konnect container more dynamic
* set default oidc_issuer_identifier
* print size of container
* builder image is not required for security scanning
* define entrypoint instead of using command
* more cleanup of testing containers
* give logs in case of error
2019-09-10 13:48:19 +02:00
Felix Bartels 8135321201 Add example compose file to run Meet without Kopano (#217)
* Add example compose file to run Meet without Kopano
* add readme 
* add an example env file
* add setup.sh so user can easily create their own
* use kopano repo by default
2019-09-06 13:19:13 +02:00
Felix Bartels 87b844b10e Add grapi-explorer (#215)
* grapi explorer is located in its own (optional) file
* update readme
* optimize eclint check
2019-08-20 21:58:54 +02:00
Felix Bartels f7934cbc51 Make it possible to use an existing konnect instance (#195)
* make konnect url configurable
* switch to fork of dockerize as it allows to skip ssl verification
since the address of the oidc issuer is now dynamic it could point to an invalid ssl certificate (the self signed cert is by default "valid" for *)
* update hadolint
* add more scopes
* only skip ssl verification when running insecure
2019-08-20 21:16:42 +02:00
Felix Bartels fb37723cc3 Enforce .editorconfig by running eclint (#213)
* tune .editorconfig for the existing files
* fix reported linting issues
* travis: switch language to node_js to be able to run npm
* travis: build on ubuntu bionic
2019-08-12 16:14:45 +02:00
Felix Bartels 3a18f22765 Update konnect and kwmserver (#204)
* Update konnect and kwmserver

Signed-off-by: Felix Bartels <felix@host-consultants.de>

* readd mime type workaround to web container

Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-07-12 08:32:06 +02:00
Felix Bartels ff13679679 update Konnect to latest upstream (#178)
Signed-off-by: Felix Bartels <felix@host-consultants.de>
2019-06-13 09:45:19 +02:00
Felix Bartels 4bcb092266 transition to all versions numbers in labels (#175)
* update supercronic to the latest release
* update tagging for base
* fix version tag for core
* put versions for all containers into labels instead
* define vcf_ref once
* remove cache-from as caches will be invalidated early on because of passing the git ref early on
* do not rebuild when publishing
* do not rebuild when publishing
* reduce layers required for env assignment
* pull newer base images for kdav, scheduler and ssl if available
* alsp publish tag for ldap containers
* fix publishing of ssl container
2019-06-11 10:26:59 +02:00
Felix Bartels d94b7ca55d remove surplus locale definition from images building upon base (#165)
* remove surplus locale configuration (should only be in base image)
update konnect
add version to ldap and ldap_demo images
* also create a tag for the ldap images
* add ldap version to compose file
2019-05-27 12:01:13 +02:00
Felix Bartels 5dd163467d Add tag to kopano_ssl image (#152)
switch kopano_ssl from apline:latest to alpine:3.9
add tagging and publishing of tag to Makefile
update version of Konnect and Kweb since they have been update meanwhile
2019-05-10 20:30:37 +02:00
Felix Bartels 250c73053f Add additional readme files for all produced images (#141) 2019-04-18 08:20:38 +02:00