Thomas Müller
7da2664144
fix: forward COLLABORA_DOMAIN and ONLYOFFICE_DOMAIN to the ocis container to allow substitution in csp.yaml ( #9007 )
2024-04-29 15:18:24 +02:00
Michael Barz
75e8b4592a
Merge pull request #8984 from owncloud/fix/wopi-example-healthcheck
...
fix: use docker healthcheck
2024-04-29 10:51:45 +02:00
Thomas Müller
93e45c3713
feat: add OCIS_LOG_LEVEL to .env and also to the app-providers ( #8980 )
2024-04-26 15:51:05 +02:00
Thomas Müller
de86f4f5d9
fix: use docker healthcheck
2024-04-26 12:44:30 +02:00
Roman Perekhod
76f97ba0c4
fix the docker-compose wopi
2024-04-26 09:24:09 +02:00
Thomas Müller
bdbba929d0
feat: add CSP and other security related headers in the oCIS proxy service ( #8777 )
...
* feat: add CSP and other security related headers in the oCIS proxy service
* fix: consolidate security related headers - drop middleware.Secure
* fix: use github.com/DeepDiver1975/secure
* fix: acceptance tests
* feat: support env var replacements in csp.yaml
2024-04-26 09:10:35 +02:00
mmattel
5246b199a6
[docs-only] updating the ocis-wopi deployment readme's
2024-04-18 16:36:32 +02:00
Ralf Haferkamp
f0089bc1cc
Allow to run wopi example deployment with podman
...
podman doesn't have a "local" log driver. Also it's docker-compatibility
socket does live in a different location (especially when running
rootless podman).
With this change you can run the deployement with a recent podman
version using:
LOG_DRIVER=journald DOCKER_SOCKET_PATH=/run/user/1000/podman/podman.sock podman compose start
2024-04-15 09:44:37 +02:00
Roman Perekhod
5a7c2c3568
bumps keycloak version
2024-03-19 08:06:39 +01:00
Dominik Schmidt
3860ed442b
Add comments to .env file
2024-02-01 15:42:49 +01:00
Dominik Schmidt
754f6cc28a
Add uppy companion to wopi example
2024-02-01 12:34:37 +01:00
André Duffeck
077d0980ba
Bump wopiserver to fix a problem with 0-byte uploads
2024-01-19 09:56:00 +01:00
Artur Neumann
c447306caf
fix NATS configuration in wopi example
2024-01-11 09:47:15 +05:45
Ralf Haferkamp
dca0c653fb
Removed deprecated envars scheduled for removal with 5.0.0
...
Fixes : #8025
2024-01-09 11:28:31 +01:00
Ralf Haferkamp
9f47836681
Remove unused ownCloudQuota attribute from LDAP Schema
...
In oCIS the quota is a setting of the personal or project spaces. We
never stored quotas in LDAP for ocis nor are there plans to do so.
Fixes : #8059
2024-01-09 09:59:04 +01:00
Willy Kloucek
a9ec15a80f
update wopiserver to v10.2.2
2023-12-07 09:07:14 +01:00
Michael Barz
ca6d87103e
feat: use global variables for password policy
2023-12-06 14:30:54 +01:00
Michael Stingl
7af9cd9e53
Add example config for 3rd party WebDAV client Cyberduck
2023-12-01 11:10:28 +01:00
Roman Perekhod
26627ab120
Merge pull request #7784 from 2403905/issue-7724
...
add banned password list to the default deployments
2023-11-29 10:23:03 +01:00
Roman Perekhod
5c549469f8
add banned password list to the default deployments
2023-11-22 15:30:17 +01:00
Christian Richter
4b4a2b012c
addapt example deployement
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2023-11-22 11:37:53 +01:00
Willy Kloucek
dd9afe059a
bump wopi server, collabora and onlyoffice for deployment examples and ci
2023-10-24 09:43:31 +02:00
Michael Barz
749f689f33
Merge pull request #7084 from owncloud/d7oc/wopiserver-ssl
...
fixed WOPISERVER_INSECURE in entrypoint script for wopiserver
2023-09-27 18:56:54 +02:00
Ralf Haferkamp
48306cbef3
deployment: Disable username validation for keycloak example
...
Set 'GRAPH_USERNAME_MATCH' to 'none'. To accept any username that is
also valid for keycloak.
2023-09-05 16:51:01 +02:00
Dennis Sieben
004ac82f30
- changed script to be compatible with dash and busybox
2023-08-25 14:50:02 +02:00
Dennis Sieben
a810cf3906
Revert "- fixed WOPISERVER_INSECURE in entrypoint skript for wopiserver"
...
This reverts commit 7162b29ad4 .
2023-08-25 14:34:09 +02:00
Willy Kloucek
6a8be29258
Merge branch 'master' into d7oc/wopiserver-ssl
2023-08-25 08:50:31 +02:00
Christian Richter
c63d5b83e5
Fix typos in expample deployments
...
Co-authored-by: Julian Koberg <jkoberg@owncloud.com >
Signed-off-by: Christian Richter <crichter@owncloud.com >
2023-08-22 17:25:24 +02:00
Christian Richter
ad439fcbde
change example deployments
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2023-08-22 17:25:24 +02:00
Dennis Sieben
dc4fb75543
- raised default wopiserver version to 10.1.0
...
- raised wopiserver in ci as well
2023-08-21 20:07:15 +02:00
Dennis Sieben
7162b29ad4
- fixed WOPISERVER_INSECURE in entrypoint skript for wopiserver
2023-08-21 19:32:04 +02:00
Christian Scherm
0ddbb95300
Add fulltext search frontend part to ocis_wopi
2023-08-15 16:10:44 +02:00
Dennis Sieben
de5dfef15d
- disabled revokeRefreshToken in Keycloak config
2023-08-09 16:27:59 +02:00
Florian Schade
90ba75e27e
enhancement: Evaluate policy resource information on single file shares ( #6888 )
...
* enhancement: Evaluate policy resource information on single file shares
* enhancement: switch to resource name evaluation for example rego put rule
2023-07-31 12:12:56 +02:00
Willy Kloucek
30ab02d30c
fix onlyoffice with wopi
2023-07-10 18:56:28 +02:00
Florian Schade
c09f82405f
enhancement: add mimetype to file extension rego function ( #6133 )
...
* enhancement: add mimetype to file extension rego function
add rego function to detect the resource extension by mimetype, at the same time this pr introduces a custom ocis namespace for the rego functions.
* enhancement: add custom logPrinter to opa policies service
* fix: imports and test
TypeByExtension which is used to resolve extension by mimetype relies on MIME-info database which differs at my local env (macos <-> drone). This is fixed by using one of the builtinTypes for testing
---------
Signed-off-by: Christian Richter <crichter@owncloud.com >
Co-authored-by: Christian Richter <crichter@owncloud.com >
2023-07-10 16:28:23 +02:00
Willy Kloucek
dd5fa693e6
use wopiserver 10.0.1
2023-06-30 16:24:13 +02:00
Willy Kloucek
7455d4ed83
Merge branch 'master' into wopiserver-10
2023-06-30 15:31:15 +02:00
Michael Barz
a86aba1c41
Adapt example deployment
2023-06-08 22:17:00 +02:00
Roman Perekhod
96f658c281
Merge pull request #6440 from 2403905/issue-6436
...
Fix the username validation when an admin update the user
2023-06-07 12:23:47 +03:00
Roman Perekhod
1ac49dfd64
Fix the username validation when an admin update the user
2023-06-06 17:15:38 +02:00
Willy Kloucek
0f3dddafab
remove references to oc.ios://ios.owncloud.com since it is no longer used
2023-06-05 13:57:05 +02:00
Roman Perekhod
cd39dd4073
Fix to prevent the email notification X-Site scripting
2023-06-02 09:47:06 +02:00
Willy Kloucek
a16b14af9a
switch to wopiserver 10
2023-05-31 12:54:11 +02:00
Ralf Haferkamp
94d9dd80eb
ocis_keycloak: Don't start builtin IDP when using keycloak
2023-05-24 17:12:38 +02:00
Ralf Haferkamp
47f5245f55
ocis_keycloak: Fix deployment example
...
After commit 52951b42b0 we need to set PROXY_USER_CS3_CLAIM and
PROXY_USER_OIDC_CLAIM for the keycloak example to still work.
Also update release notes to mentions the changed default.
2023-05-24 17:12:38 +02:00
Roman Perekhod
972dc14dbb
the idm run excluded for the ocis ldap stack #6184
2023-05-03 10:41:31 +02:00
Ralf Haferkamp
d563b63d8f
Update to latest schema
2023-04-27 12:28:13 +02:00
Ralf Haferkamp
3baeee3b73
ocis_keycloak: Enable backchannel logout for "web" client
...
This enables backchannel logout for the "web" client.
Also this bumps keycloak to 21.1
2023-04-24 16:02:52 +02:00
Florian Schade
fdaf39f5d1
fix: proxy policies middleware tus filename evaluation
...
when uploading files via uppy (tus), the path does not give any information about the file, PUT contains the filename in the path, tus POST not.
this pr extracts the HeaderUploadMetadata from that POST request and enhances the policies grpc environment request with that information.
Therefore, the policies service is now able to evaluate proxy requests for tus uploads too.
2023-04-18 20:26:52 +02:00