Commit Graph

17 Commits

Author SHA1 Message Date
Pascal Bleser
2573bf4a99 upgrade Stalwart to 0.13.2 2026-01-22 09:39:15 +01:00
Pascal Bleser
0247c28d58 Refactor groupware service after ADR decision on the Groupware API
* after having decided that the Groupware API should be a standalone
   independent custom REST API that is using JMAP data models as much as
   possible,
 * removed Groupware APIs from the Graph service
 * moved Groupware implementation to the Groupware service, and
   refactored a few things accordingly
2026-01-22 09:39:15 +01:00
Pascal Bleser
0478eb98fd opencloud_full: upgrade Stalwart to 0.12.5, and use the ghcr.io container repository to avoid Hub limits 2026-01-22 09:39:15 +01:00
Pascal Bleser
cd9d05c31a fix Stalwart LDAP configuration 2026-01-22 09:39:15 +01:00
Pascal Bleser
d00fe96128 Use password policy overlay in LDAP and configure Stalwart to use it 2026-01-22 09:39:15 +01:00
Pascal Bleser
8df0f5ed75 upgrade Stalwart to 0.12.4 2026-01-22 09:39:15 +01:00
Pascal Bleser
6f35e9c69a upgrade Stalwart to 0.12 2026-01-22 09:39:15 +01:00
Pascal Bleser
89d07b0ac7 minor corrections to the Stalwart configuration 2026-01-22 09:39:15 +01:00
Pascal Bleser
1e5dd90f3d Introduce a the auth-api service
* primitive implementation to demonstrate how it could work, still to
   be considered WIP at best

 * add new dependency: MicahParks/jwkset and MicahParks/keyfunc to
   retrieve the JWK set from KeyCloak to verify the signature of the
   JWTs sent as part of Bearer authentication in the /auth API

 * (minor) opencloud/.../service.go: clean up a logging statement that
   was introduced earlier to hunt down why the auth-api service was not
   being started
2026-01-22 09:39:15 +01:00
Pascal Bleser
1b45acfa43 add an OIDC Directory to Stalwart, requires exposing Keycloak port 8080 directly to access the userinfo endpoint using HTTP since the certificates in traefik are self-signed and end up being rejected by Stalwart with no option to bypass the certificate check 2026-01-22 09:39:15 +01:00
Pascal Bleser
ef888ea90d rename Stalwart fallback admin username from 'admin' to 'mailadmin' since 'admin' exists as a regular user in LDAP and thus won't have access to the administration 2026-01-22 09:39:15 +01:00
Pascal Bleser
c10f04bd95 Add Stalwart container to the opencloud_full deployment, using the OpenLDAP container as a directory for user authentication 2026-01-22 09:36:14 +01:00
André Duffeck
ef3c0da0cb Assing the opencloudUser to the users so they get a personal space 2026-01-20 15:49:13 +01:00
Ralf Haferkamp
b9523caa70 devtools: add deployment for multi-tenancy 2026-01-20 15:49:12 +01:00
Jörn Friedrich Dreyer
79a0fe0cec devtools: use http2 for backend connection
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-12-16 14:34:22 +01:00
Thomas Schweiger
2c18d5b010 fix: apply changes from other fixes in compose repo (#1707)
* fix: apply changes from other fixes in compose repo

* temporarily disabled e2e navigation step

---------

Co-authored-by: Viktor Scharf <v.scharf@opencloud.eu>
2025-10-24 22:10:27 +02:00
Ralf Haferkamp
5023642885 cleanup: Move old compose example to devtools directory
We agreed to move the 'opencloud_full' example to a new directory to
avoid confusion with the supported compose examples in
opencloud-compose.

This commit keeps the bare-metal example in place as that is still
mentioned in the documentation.
2025-09-24 08:33:03 +02:00