Commit Graph

17 Commits

Author SHA1 Message Date
Pascal Bleser
b326c1448f upgrade Stalwart to 0.13.2 2026-02-04 09:40:20 +01:00
Pascal Bleser
09716cbe1b Refactor groupware service after ADR decision on the Groupware API
* after having decided that the Groupware API should be a standalone
   independent custom REST API that is using JMAP data models as much as
   possible,
 * removed Groupware APIs from the Graph service
 * moved Groupware implementation to the Groupware service, and
   refactored a few things accordingly
2026-02-04 09:40:20 +01:00
Pascal Bleser
2eedafa6f6 opencloud_full: upgrade Stalwart to 0.12.5, and use the ghcr.io container repository to avoid Hub limits 2026-02-04 09:40:19 +01:00
Pascal Bleser
68e1942aff fix Stalwart LDAP configuration 2026-02-04 09:40:19 +01:00
Pascal Bleser
092f4815b5 Use password policy overlay in LDAP and configure Stalwart to use it 2026-02-04 09:40:19 +01:00
Pascal Bleser
041ec185f0 upgrade Stalwart to 0.12.4 2026-02-04 09:40:19 +01:00
Pascal Bleser
1669601d99 upgrade Stalwart to 0.12 2026-02-04 09:40:19 +01:00
Pascal Bleser
c6d15063e1 minor corrections to the Stalwart configuration 2026-02-04 09:40:19 +01:00
Pascal Bleser
23f40932b3 Introduce a the auth-api service
* primitive implementation to demonstrate how it could work, still to
   be considered WIP at best

 * add new dependency: MicahParks/jwkset and MicahParks/keyfunc to
   retrieve the JWK set from KeyCloak to verify the signature of the
   JWTs sent as part of Bearer authentication in the /auth API

 * (minor) opencloud/.../service.go: clean up a logging statement that
   was introduced earlier to hunt down why the auth-api service was not
   being started
2026-02-04 09:40:19 +01:00
Pascal Bleser
964a83a30b add an OIDC Directory to Stalwart, requires exposing Keycloak port 8080 directly to access the userinfo endpoint using HTTP since the certificates in traefik are self-signed and end up being rejected by Stalwart with no option to bypass the certificate check 2026-02-04 09:40:19 +01:00
Pascal Bleser
9b91751578 rename Stalwart fallback admin username from 'admin' to 'mailadmin' since 'admin' exists as a regular user in LDAP and thus won't have access to the administration 2026-02-04 09:40:19 +01:00
Pascal Bleser
d9a054604b Add Stalwart container to the opencloud_full deployment, using the OpenLDAP container as a directory for user authentication 2026-02-04 09:40:19 +01:00
André Duffeck
ef3c0da0cb Assing the opencloudUser to the users so they get a personal space 2026-01-20 15:49:13 +01:00
Ralf Haferkamp
b9523caa70 devtools: add deployment for multi-tenancy 2026-01-20 15:49:12 +01:00
Jörn Friedrich Dreyer
79a0fe0cec devtools: use http2 for backend connection
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-12-16 14:34:22 +01:00
Thomas Schweiger
2c18d5b010 fix: apply changes from other fixes in compose repo (#1707)
* fix: apply changes from other fixes in compose repo

* temporarily disabled e2e navigation step

---------

Co-authored-by: Viktor Scharf <v.scharf@opencloud.eu>
2025-10-24 22:10:27 +02:00
Ralf Haferkamp
5023642885 cleanup: Move old compose example to devtools directory
We agreed to move the 'opencloud_full' example to a new directory to
avoid confusion with the supported compose examples in
opencloud-compose.

This commit keeps the bare-metal example in place as that is still
mentioned in the documentation.
2025-09-24 08:33:03 +02:00