Compare commits

..

407 Commits

Author SHA1 Message Date
Pascal Bleser
3d8cad17d4 groupware: update to Stalwart 0.15.0 2025-12-17 09:34:22 +01:00
Pascal Bleser
790a241d9c groupware: shift some attributes of the Groupware object around, in defaults and config sub-structures 2025-12-09 14:33:29 +01:00
Pascal Bleser
dc7df401aa groupware: fix failing pkg/jscontact unit tests 2025-12-09 10:07:02 +01:00
Pascal Bleser
3da68555f7 groupware: fix failing pkg/jscalendar unit tests 2025-12-09 10:05:49 +01:00
Pascal Bleser
6ff5b1a31d groupware: add description and version annotations for env configuration properties 2025-12-09 09:55:27 +01:00
Pascal Bleser
5dc1f28e87 groupware: improve email submission and testing
* jmap/EmailCreate: add more attributes that were omitted: Headers,
   InReplyTo, References, Sender

 * add jmap GetEmailSubmissionStatus

 * improve email integration tests by adding a thorough test for email
   submission

 * jmap integration tests: provision principals and domains using the
   Stalwart Management API, switching from an in-memory to an internal
   directory
2025-12-09 09:15:39 +01:00
Pascal Bleser
42cce92e8f groupware: add retrieving and adding mailboxIds for drafts and sent if they are missing 2025-12-09 09:15:39 +01:00
Pascal Bleser
25068ada8d groupware: refactor response objects to take a list of accountIds 2025-12-09 09:15:39 +01:00
Pascal Bleser
e7d557ca61 groupware: minor: remove network declaration in stalwart.yml 2025-12-09 09:15:39 +01:00
Pascal Bleser
8ae4694253 groupware: fix missing casting to jmap.State after changes in pkg/jmap 2025-12-09 09:15:39 +01:00
Pascal Bleser
d0effed4b5 groupware, auth-api: remove tracing and tracing configuration 2025-12-09 09:15:39 +01:00
Pascal Bleser
dfda4b3a9a groupware: upgrade the Stalwart image in devtools from 0.14.0 to 0.14.1 2025-12-09 09:15:39 +01:00
Pascal Bleser
aa95437f59 groupware: WS push improvements, add getting email changes to WS integration test 2025-12-09 09:15:39 +01:00
Pascal Bleser
14bd930b92 groupware: JMAP WS push notifications support 2025-12-09 09:15:39 +01:00
Pascal Bleser
6a5c90e6d6 groupware: fix email summaries and allow negative offsets
* fix a bug in how email summaries are flattened across multiple
   accounts, which was previous resulting in empty email objects

 * allow negative offset in email pagination

 * make all /emails endpoints return emails without bodies
2025-12-09 09:15:39 +01:00
Pascal Bleser
282bee59fe groupware: response payload /groupware/accounts/{id}/emails should be without email bodies 2025-12-09 09:15:39 +01:00
Pascal Bleser
225f6f6b64 groupware: add Object-Type and Account-Id response headers
* implement Request.AllAccountIds() to generalize the fetching (and
   uniqifying) of all account IDs, which will allow us to implement
   things such as "subscribed" accounts, or limiting the number of
   accounts in one request

 * add Account-Id response header

 * add Object-Type response header
2025-12-09 09:15:39 +01:00
Pascal Bleser
ae9c8dc653 groupware: feature test improvements and upgrade to Stalwart 0.14.1
* upgrade Stalwart image for devtools/full to 0.14.1

 * re-assert which features are implemented or not in 0.14.1

 * refactor the integration tests yet again to make it clearer and
   easier to see those "features-or-not"

 * get rid of old tests that are now better covered by integration tests

 * rewrite how we compare expected and actual objects in integration
   tests, finally having found a way to ignore the @type attribute
   properly instead of having to mutate all objects to remove it
2025-12-09 09:15:39 +01:00
Pascal Bleser
1ea251c4ea groupware: finalize JMAP events integration test, with multiple changes to the model to conform with draft-ietf-calext-jscalendarbis-10 and fields that are currently not implemented in Stalwart 2025-12-09 09:15:39 +01:00
Pascal Bleser
9f65d90579 groupware: refactor the JMAP integration tests 2025-12-09 09:15:39 +01:00
Pascal Bleser
5dc9f71040 groupware: improve JMAP ContactCard integration tests 2025-12-09 09:15:39 +01:00
Pascal Bleser
e27df2cdc9 groupware: improve JMAP integration tests for ContactCards 2025-12-09 09:15:39 +01:00
Pascal Bleser
b8f60f365b groupware: stalwart: add the magic sharing.allow-directory-query config setting, but keep it to false (default) 2025-12-09 09:15:39 +01:00
Pascal Bleser
a6aeb78cfb groupware: fix recently introduced error with UploadedBlob with and without a sha512 2025-12-09 09:15:39 +01:00
Pascal Bleser
b30585503f groupware: fix blob uploading metadata and add 'POST /blobs' route 2025-12-09 09:15:39 +01:00
Pascal Bleser
457e0d15d3 groupware: add getting a contact by ID + add integration tests for contacts 2025-12-09 09:15:39 +01:00
Pascal Bleser
29d9071a09 groupware: improved integration test for email, fixed two bugs 2025-12-09 09:15:39 +01:00
Pascal Bleser
346500801d groupware: fix deserialization of Event Alert Trigger types using mapstructure 2025-12-09 09:15:39 +01:00
Pascal Bleser
abd7a37a7b groupware: remove mock calendars and contacts 2025-12-09 09:15:39 +01:00
Pascal Bleser
000b7b209b groupware: some fixes accordingly to the latest JMAP and jscalendarbis RFCs 2025-12-09 09:15:39 +01:00
Pascal Bleser
db3efe6975 groupware: return identities with accounts in the /accounts endpoint 2025-12-09 09:15:39 +01:00
Pascal Bleser
dce5b16936 groupware: move POST+DELETE of contacts and events as a top-level route underneath accounts 2025-12-09 09:15:39 +01:00
Pascal Bleser
4c1b887f65 groupware: add real calendars and events 2025-12-09 09:15:39 +01:00
Pascal Bleser
d53f7be95a groupware: implement/fix email submission 2025-12-09 09:15:39 +01:00
Pascal Bleser
0b393de47f groupware: implement Mailbox modification endpoints + refactor ETag/state in the framework
* add endpoints for Mailboxes:
   - PATCH mailboxes/{id}
   - DELETE mailboxes/{id}
   - POST mailboxes

 * refactor the pkg/jmap and groupware framework to systematically
   return a jmap.State out-of-band of the per-method payloads, since
   they are almost always present in JMAP responses, which lead to the
   artificial creation of a lot of composed struct types just to also
   return the State; on the downside, it adds yet another return
   parameter
2025-12-09 09:15:39 +01:00
Pascal Bleser
e36dff994c groupware: add ical blob parsing endpoint 2025-12-09 09:15:39 +01:00
Pascal Bleser
18027f14e0 groupware: add Mailbox sorting 2025-12-09 09:15:39 +01:00
Pascal Bleser
9275ff1527 groupware: also change accounts to an array instead of a map in the response to /groupware/ 2025-12-09 09:15:39 +01:00
Pascal Bleser
e9fb96e55f groupware: jmap: fix id -> blobId attribute when uploading a blob 2025-12-09 09:15:39 +01:00
Pascal Bleser
26317a1855 groupware: minor: reorganize the route nesting 2025-12-09 09:15:39 +01:00
Pascal Bleser
3cddb65e24 groupware: change /accounts endpoint to return an array with the accountId instead of a map 2025-12-09 09:15:39 +01:00
Pascal Bleser
f2e515638c groupware: fix creating contacts 2025-12-09 09:15:39 +01:00
Pascal Bleser
43c11075b7 groupware: actually add total and limit to the email summary endpoint 2025-12-09 09:15:39 +01:00
Pascal Bleser
f15681c50a groupware: fix compilation in tests after recent changes 2025-12-09 09:15:38 +01:00
Pascal Bleser
85305136f8 groupware: add missing total,limit,offset attributes in the QueryEmailsSummaries response 2025-12-09 09:15:38 +01:00
Pascal Bleser
ed730b023c groupware: add threadCount to /groupware/accounts/{accountId}/mailboxes/{mailboxId}/emails 2025-12-09 09:15:38 +01:00
Pascal Bleser
0fdc5a01df groupware: add ContactCard operations 2025-12-09 09:15:38 +01:00
Pascal Bleser
276209c616 groupware: add recipe for using ldapsearch in an Alpine container to DEVELOPER.md 2025-12-09 09:15:38 +01:00
Pascal Bleser
1f59143652 upgrade to Stalwart 0.14.0
* upgrade image version in devtools to 0.14.0

 * fix idmldap configuration to use the cn attribute in order for that
   to also work for groups (groups don't have a uid attribute in the IDM
   built-in LDAP)

 * group resources are now checked against LDAP, changed
   demo-principals.yaml accordingly to refer to a group that exists in
   LDAP as part of the demo data
2025-12-09 09:15:38 +01:00
Pascal Bleser
84ce6b2320 groupware: add threadSize in email-by-id response 2025-12-09 09:15:38 +01:00
Pascal Bleser
5e61c03696 groupware: introduce constants for Email property names, see EmailSummaryProperties 2025-12-09 09:15:38 +01:00
Pascal Bleser
2358e61733 groupware: fix keyword patching syntax for adding and removing email keywords endpoints 2025-12-09 09:15:38 +01:00
Pascal Bleser
ed605f92b4 groupware: fix keyword patching syntax for markAsSeen=true 2025-12-09 09:15:38 +01:00
Pascal Bleser
d80db93332 groupware: add threadSize property in the email summary endpoint 2025-12-09 09:15:38 +01:00
Pascal Bleser
46f8d27e42 groupware: improve email sanitization by using the mime package to parse the part type, in order to recognize HTML ones that need sanitization 2025-12-09 09:15:38 +01:00
Pascal Bleser
8a97320494 groupware: add headers Unmatched-Path and Unsupported-Method to make
development of the web UI easier
2025-12-09 09:15:38 +01:00
Pascal Bleser
0507779211 groupware: add markAsSeen=true to mark an email as $seen before it is
retrieved
2025-12-09 09:15:38 +01:00
Pascal Bleser
4dfed5a43e groupware: add the Retry-After header in responses when the session cannot be retrieved 2025-12-09 09:15:38 +01:00
Pascal Bleser
f024c2c9a9 groupware: add searching emails by their Message-Id + retrieving an email by its ID as message/rfc822 2025-12-09 09:15:38 +01:00
Pascal Bleser
0d23867d54 groupware: add email HTML sanitization
* sanitize email text/html body parts using bluemonday

 * deps(groupware):
   - new dependency: github.com/microcosm-cc/bluemonday
   - transitive dependencies:
     - github.com/aymerick/douceur
     - github.com/gorilla/css
2025-12-09 09:15:38 +01:00
Pascal Bleser
1845fa86f4 groupware: add identity deletion 2025-12-09 09:15:38 +01:00
Pascal Bleser
df8b42451a groupware:
* made several email related operations multi-account:
   QueryEmailSnippets, QueryEmails, QueryEmailsWithSnippets

 * add GetIdentitiesForAllAccounts

 * add GetEmailsForAllAccounts

 * jmap: add CreateIdentity, UpdateIdentity; groupware: add
   GetIdentityById, AddIdentity, ModifyIdentity

 * add temporary workaround until Calendars, Tasks, Contacts are
   implemented in Stalwart when determining the default account for
   those: use the mail one in the mean time
2025-12-09 09:15:38 +01:00
Pascal Bleser
633679c8de groupware: add instructions for using stalwart-admin 2025-12-09 09:15:38 +01:00
Pascal Bleser
cb2c6dc661 groupware: fix NPE when one of the accounts is a group account 2025-12-09 09:15:38 +01:00
Pascal Bleser
b580392a4c groupware: fix devtools LDAP passwords, as it was breaking regular opencloud drive authentication 2025-12-09 09:15:38 +01:00
Pascal Bleser
4cb8a8ae18 groupware: DEVELOPER.md: add note explaining LDAPTLS_REQCERT 2025-12-09 09:15:38 +01:00
Pascal Bleser
ecc9e6b34f groupware: accept both '_' and '*' as the 'default account' placeholder 2025-12-09 09:15:38 +01:00
Pascal Bleser
f1972e0e23 groupware: DEVELOPER.md: explain how to set a quota on a user using the Stalwart management API 2025-12-09 09:15:38 +01:00
Pascal Bleser
2efc4fdfce groupware: jmap: don't collpase threads when searching for emails, and add dumping of JMAP request payloads when trace logging is enabled 2025-12-09 09:15:38 +01:00
Pascal Bleser
d3cb741e44 groupware: try an alternative way to configure Stalwart dynamically in the devtools Docker Compose setup, by using separate files and ${STALWART_AUTH_DIRECTORY} to name to file to mount 2025-12-09 09:15:38 +01:00
Pascal Bleser
73fd7e0f78 jmap: add GetInboxNameForMultipleAccounts 2025-12-09 09:15:38 +01:00
Pascal Bleser
96fcf961b8 groupware: add Mermaid diagrams to describe the two setup options 2025-12-09 09:15:38 +01:00
Pascal Bleser
f5ac62859a groupware: implement email updating and email keyword updating endpoints 2025-12-09 09:15:38 +01:00
Pascal Bleser
051b483def docs(groupware): upgrade @redocly/cli 2.3.1 -> 2.4.0 2025-12-09 09:15:38 +01:00
Pascal Bleser
d470b5176b jmap: fix Email/set 2025-12-09 09:15:38 +01:00
Pascal Bleser
925d9b894b groupware: further updates to make everything work with the builtin LDAP and OIDC 2025-12-09 09:15:38 +01:00
Pascal Bleser
3da0debdec groupware: for /accounts/all/emails/latest/summary, rename the ?unread query parameter into ?seen as that is more intuitive 2025-12-09 09:15:38 +01:00
Pascal Bleser
197c8543f2 groupware: make everything also work with the built-in LDAP and IDP 2025-12-09 09:15:38 +01:00
Pascal Bleser
11a69969f6 groupware: devtools: Stalwart: add internal LDAP configuration 2025-12-09 09:15:38 +01:00
Pascal Bleser
d7b675251d groupware: update @redocly/cli from 2.3.0 to 2.3.1 2025-12-09 09:15:38 +01:00
Pascal Bleser
996bc858c7 docs(groupware): fix basepath in OpenAPI, /groupware instead of /groupware/groupware 2025-12-09 09:15:38 +01:00
Viktor Scharf
b369f8b415 fixed connection reset issue. adapted make file to generate swagger docs on mac 2025-12-09 09:15:38 +01:00
Pascal Bleser
7587c54e4e groupware: improve jmap integration tests
* use gofakeit instead of loremipsum, as it can also fake images for
   attachments

 * random emails for testing: generate threads, add attachments
2025-12-09 09:15:38 +01:00
Pascal Bleser
e6abc2d8ff groupware: rewrite JMAP integration test to be more reusable, and upgrade Stalwart container to 0.13.4 2025-12-09 09:15:38 +01:00
Pascal Bleser
0052d6fc4f groupware: upgrade Stalwart in devtools from 0.13.2 to 0.13.4
* changes from 0.13.4:
   - JMAP: Protocol layer rewrite for zero-copy deserialization and
     architectural improvements.
   - IMAP: Unbounded memory allocation in request parser
     (CVE-2025-61600)
   - IMAP: Wrong permission checked for GETACL.
   - JMAP: References to previous method fail when there are no results
     (stalwartlabs#1507).
   - JMAP: Enforce quota checks on Blob/copy.
   - JMAP: Mailbox/get fails without accountId argument (stalwartlabs#1936).
   - JMAP: Do not return invalidProperties when email update doesn't
     contain changes (stalwartlabs#1139)
   - iTIP: Include date properties in REPLY (stalwartlabs#2102).
   - OIDC: Do not set username field if it is the same as the email field.
   - Telemetry: Fix calculateMetrics housekeeper task (stalwartlabs#2155).
   - Directory: Always use rsplit to extract the domain part from email
     addresses.

  * changes from 0.13.3:
   - CLI: Health checks
   - WebDAV: Assisted discovery v2
   - iTIP: Do not send a REPLY when deleting an event that was not
     accepted.
   - iTIP: Include event details in REPLY messages (stalwart#2102).
   - iTIP: Add organizer to iMIP replies if missing to deal with MS
     Exchange 2010 bug.
   - OIDC: Do not overwrite locally defined aliases (stalwart#2065).
   - HTTP: Scan ban should only be triggered by HTTP parse errors.
   - HTTP: Skip scanner fail2ban checks when the proxy client IP can't
     be parsed (stalwart#2121).
   - JMAP: Do not allow roles to be removed from system mailboxes
     (stalwart#1977).
   - JMAP WS: Fix panic when using invalid server url.
   - SMTP: Do no send EHLO twice when STARTTLS is unavailable
     (stalwart#2050).
   - IMAP: Allow ENABLE UTF8 in IMAPrev1.
   - IMAP: Include administer permission in ACL responses.
   - IMAP: Add owner rights to ACL get responses.
   - IMAP: Do not auto-train Bayes when moving messages from Junk to
     Trash.
   - IMAP/ManageSieve: Increase maximum quoted argument size
     (stalwart#2039).
   - CalDAV: Limit recurrence expansions in calendar reports
     (CVE-2025-59045).
   - WebDAV: Do not fix percent encoding on WebDAV FS (stalwart#2036).
2025-12-09 09:15:38 +01:00
Pascal Bleser
2343e7fa83 groupware: add bootstrapping on / with quotas for all accounts 2025-12-09 09:15:38 +01:00
Pascal Bleser
d95b9a8e8f groupware: add /quota for all accounts 2025-12-09 09:15:38 +01:00
Pascal Bleser
a5701ceb83 groupware: improve instructions in DEVELOPER.md 2025-12-09 09:15:38 +01:00
Pascal Bleser
d79f0b3829 groupware: update @redocly/cli: 2.2.2 -> 2.3.0 2025-12-09 09:15:38 +01:00
Pascal Bleser
abb57193ff groupware: add quota API + add support for Accept-Language and Content-Language 2025-12-09 09:15:37 +01:00
Pascal Bleser
01b4a1f751 groupware: minor improvements to the DEVELOPER.md 2025-12-09 09:15:37 +01:00
Pascal Bleser
17b281cadf groupware: add flag to currently ignore session capability checks for calendars, contacts and tasks, as those are not implemented in Stalwart yet; will need to remove it in the future 2025-12-09 09:15:37 +01:00
Pascal Bleser
f4f24664ad groupware: add JMAP capability checking (in part: for contacts, calendars, tasks) 2025-12-09 09:15:37 +01:00
Pascal Bleser
101f38dd0b /auth: add SkipXAccessToken:true 2025-12-09 09:15:37 +01:00
Pascal Bleser
ebd51dba3b groupware: add mock endpoints for tasklists and tasks 2025-12-09 09:15:37 +01:00
Pascal Bleser
ed488b5a01 groupware: implement JMAP Task specification 2025-12-09 09:15:37 +01:00
Pascal Bleser
2c6ff6cd9e groupware: more mock data, added missing JMAP types 2025-12-09 09:15:37 +01:00
Pascal Bleser
eeccb56d19 groupware: add mock endpoints for addressbooks and contacts 2025-12-09 09:15:37 +01:00
Pascal Bleser
04b038a129 opencloud_full: also keep the 'Trace-Id' HTTP header 2025-12-09 09:15:37 +01:00
Pascal Bleser
09f69c5a62 implement JSCalendar (RFC 8984) 2025-12-09 09:15:37 +01:00
Pascal Bleser
85fed11797 services/groupware/DEVELOPER.md: adapt to new path for the opencloud_full deployment 2025-12-09 09:15:37 +01:00
Pascal Bleser
0e3e9607c3 JSContact: refactored after full test coverage, stronger typing for enumerations 2025-12-09 09:15:37 +01:00
Pascal Bleser
e2c9350ea1 Implement JSContact (RFC9553) Model
* add pkg/jscontact with the implementation of the RFC9553 data model

 * add JMAP Calendar session capabilities support in pkg/jmap
2025-12-09 09:15:37 +01:00
Pascal Bleser
5cc98f0792 Docker Compose Groupware improvements
* made a few changes in order to further simplify the setup for
   developers of the Groupware backend

 * add STALWART_DOMAIN to deployments/examples/opencloud_full/.env

 * adapt the Stalwart configuration file to not set server.hostname and,
   instead, pick it up from /etc/hostname, which is set by Docker
   Compose as we can use default values for STALWART_DOMAIN there, in an
   analogous fashion to the other containers in that project

 * add config/keycloak/clients/groupware.json to avoid requiring manual
   configuration of Keycloak via the admin web UI

 * Stalwart container:
   - listen for SMTPS on :1465
   - remove the stalwart-logs volume, not needed (logs are going to
     stdout)

 * updated services/groupware/DEVELOPER.md:
   - refer to a variable OCDIR to make instructions more copy-pasteable
   - remove manual Keycloak configuration section as it is now obsolete,
     replaced by provisioning a configuration file instead
2025-12-09 09:15:37 +01:00
Pascal Bleser
4fee45379b start websocket implementation, add endpoint for email summaries
* feat(groupware): start implementing JMAP websocket support for push
   notifications (unfinished)

 * groupware: add GetLatestEmailsSummaryForAllAccounts

 * add new vendored dependency: github.com/gorilla/websocket

 * jmap: add QueryEmailSummaries

 * openapi: start adding examples

 * openapi: add new tooling for api-examples.yaml injection

 * apidoc-process.ts: make it more typescript-y

 * bump @redocly/cli from 2.0.8 to latest 2.2.0
2025-12-09 09:15:37 +01:00
Pascal Bleser
2ea8afeb74 feat(groupware): add WebsocketEndpoint to the JMAP Session 2025-12-09 09:15:37 +01:00
Pascal Bleser
c4a16e3e9a refactor(groupware): just use a function for the attachment picker
Minor: be more Go idiomatic: just use a function to pick the attachment
from an Email's attachment list instead of using an interface with
multiple iplementation structs.
2025-12-09 09:15:37 +01:00
Pascal Bleser
a65a59b2d0 groupware: improved attachment APIs
* feat(groupware): add /accounts/{}/emails/{}/attachments

 * feat(groupware): add
   /accounts/{}/emails/{}/attachments?partId=&name=&blobId=
2025-12-09 09:15:37 +01:00
Pascal Bleser
21ea094d99 jmap: modify GetBlob -> GetBlobMetadata
* fix(jmap): fix bug where CommandBlobUpload was used instead of
   CommandBlobGet in GetBlob (now GetBlobMetadata)

 * we currently don't need a variant of BlobGetCommand that also
   retrieves the content of the blob, instead we only use it for
   retrieving metadata about it
2025-12-09 09:15:37 +01:00
Pascal Bleser
431a5ab3de fix(groupware): update DEVELOPER.md imap-filler usage since it was updated to use flags instead of environment variables 2025-12-09 09:15:37 +01:00
Pascal Bleser
1d94e3811e docs(groupware): more developer instructions 2025-12-09 09:15:37 +01:00
Pascal Bleser
3cb78ed31b more updates to the Groupware DEVELOPER.md 2025-12-09 09:15:37 +01:00
Pascal Bleser
d54e27dcdf docs(groupware): add configuration instructions to DEVELOPER.md 2025-12-09 09:15:37 +01:00
Pascal Bleser
c31d7c57bb fix(groupware): fix JMAP error handling
* the JMAP error handling was not working properly, fixed it and added
   error definitions accordingly

 * add operations to retrieve mailbox roles and mailboxes by role for
   all accounts
2025-12-09 09:15:37 +01:00
Pascal Bleser
3026ddb255 refactor(groupware): rename "Messages" to "Email" everywhere
There was really no reason to go with "Messages" as far as the
vocabulary of the Groupware API goes, since the objects those APIs serve
are "Emails", to stick with the wording of the JMAP specification.
2025-12-09 09:15:37 +01:00
Pascal Bleser
c4fb13b263 refactor(groupware): use a function for multi-account method call IDs
* introduce a function 'mcid' to assemble method call IDs per account
   instead of doing that inline in each function, in case the rules for
   doing so change in the future
2025-12-09 09:15:37 +01:00
Pascal Bleser
df21fdf2e2 docs(groupware): add services/groupware/DEVELOPER.md 2025-12-09 09:15:37 +01:00
Pascal Bleser
6224ded8b5 refactor(groupware): add max requests check
* move jmap.request() to jmap.Client.request() and pass the Session
   and a Logger to introduce checking the number of methodCalls within a
   request not exceeding the limit of the Session, as well as error
   handling and logging there instead of in each caller

 * a few bugfixes:
   - add a few missing Send() calls in logs
   - correct the response tag matching for
     GetMailboxChangesForMultipleAccounts
   - fix typo in Identity.ReplyTo json serialization rune
   - fix response tag in pkg/jmap/testdata/mailboxes1.json after
     changing them to be prefixed by the accountId
2025-12-09 09:15:37 +01:00
Pascal Bleser
0da72cf346 groupware: minor typo fixes 2025-12-09 09:15:37 +01:00
Pascal Bleser
aab08dd3de chore(groupware): add launcher for OC + containers for services
* add a launcher for running OpenCloud from within VSCode, but using
   third-party services that are running within the docker compose
   'full' example setup
2025-12-09 09:15:37 +01:00
Pascal Bleser
f470462ead feat(groupware): add fetching all mailboxes for all accounts
* add URL to retrieve all the mailboxes for all the accounts of a user,
   as a first use-case for an all-accounts operation, as
   /accounts/all/mailboxes

 * add URL to retrieve mailbox changes for all the mailboxes of all the
   accounts of a user, as a first use-case for an all-accounts
   operation, as /accounts/all/mailboxes/changes

 * change the defaultAccountId from '*' to '_', as '*' rather indicates
   "all" than "default", and we might want to use that for "all
   accounts" operations in the future

 * refactor(groupware): remove the accountId parameter from the logger()
   function, as it is not used anyways, but also confusing for
   operations that support multiple account ids
2025-12-09 09:15:37 +01:00
Pascal Bleser
62cace14fe docs(groupware): OpenAPI improvements
* refactor some pkg/jmap and groupware methods to make more sense from
   an API point-of-view

 * add path parameter documentation, but automate it by injecting their
   definition into the OpenAPI YAML tree that is extracted from the
   source code using go-swagger as it is too cumbersome, repetitive and
   error-prine to document them in the source code; wrote a TypeScript
   file apidoc-process.ts to do so

 * add generating an offline HTML file for the OpenAPI documentation
   using redocly, and injecting a favicon into the resulting HTML; wrote
   a TypeScript file apidoc-postprocess-html.ts to do so
2025-12-09 09:15:37 +01:00
Pascal Bleser
a8c2beac3a test(groupware): add testcontainers based jmap test
* adds pkg/jmap/jmap_integration_test.go

 * uses ghcr.io/stalwartlabs/stalwart:v0.13.2-alpine

 * can be disabled by setting one of the following environment
   variables, in the same fashion as ca0493b28
   - CI=woodpecker
   - CI_SYSTEM_NAME=woodpecker
   - USE_TESTCONTAINERS=false

 * dependencies:
   - bump github.com/go-test/deep from 1.1.0 to 1.1.1
   - add github.com/cention-sany/utf7
   - add github.com/dustinkirkland/golang-petname
   - add github.com/emersion/go-imap/v2
   - add github.com/emersion/go-message
   - add github.com/emersion/go-sasl
   - add github.com/go-crypt/crypt
   - add github.com/go-crypt/x
   - add github.com/gogs/chardet
   - add github.com/inbucket/html2text
   - add github.com/jhilleryerd/enmime/v2
   - add github.com/ssor/bom
   - add gopkg.in/loremipsum.v1
2025-12-09 09:15:37 +01:00
Pascal Bleser
1b732b8bff refactor(groupware): session cache and DNS autodiscovery
* move the logging of the username and session state away from pkg/jmap
   and into services/groupware

 * introduce more decoupling for the session cache, as well as moving
   the implementation into groupware_session.go
2025-12-09 09:15:37 +01:00
Pascal Bleser
33cc3365ee groupware: add DNS auto-discovery (currently disabled, needs testing) 2025-12-09 09:15:37 +01:00
Pascal Bleser
3e48284295 add a .gitignore entry for debug binaries built by VSCode when running OpenCloud 2025-12-09 09:15:37 +01:00
Pascal Bleser
c9a4bb94cd groupware: session handling improvements
* remove the baseurl from the JMAP client configuration, and pass it to
   the session retrieval functions instead, as that is really the only
   place where it is relevant, and we gain flexibility to discover that
   session URL differently in the future without having to touch the
   JMAP client

 * move the default account identifier handling from the JMAP package to
   the Groupware one, as it really has nothing to do with JMAP itself,
   and is an opinionated feature of the Groupware REST API instead

 * add an event listener interface for JMAP events to be more flexible
   and universal, typically for metrics that are defined on the API
   level that uses the JMAP client

 * add errors for when default accounts cannot be determined

 * split groupware_framework.go into groupware_framework.go,
   groupware_request.go and groupware_response.go

 * move the accountId logging into the Groupware level instead of JMAP
   since it can also be relevant to other operations that might be
   worthy of logging before the JMAP client is even invoked
2025-12-09 09:15:37 +01:00
Pascal Bleser
3ac4bcfeeb groupware: fix debug server, was missing a lot of configuration options and was binding to :80 2025-12-09 09:15:37 +01:00
Pascal Bleser
58583a66bb docs(groupware): add Groupware related ADRs 2025-12-09 09:15:37 +01:00
Pascal Bleser
1d6433f1c9 refactor(groupware): logging and metrics improvements
* some minor code refactorings to improve logging and metrics

 * more code documentation
2025-12-09 09:15:37 +01:00
Pascal Bleser
fc938bc4bc jmap: minor logging improvements 2025-12-09 09:15:37 +01:00
Pascal Bleser
724c44567b groupware: improve metrics
* implement more metrics, in a more streamlined fashion

 * use concurrent-map to store SSE streams instead of a regular map with
   one big lock that will not scale when it grows, causing too much
   contention on that one lock

 * while testing error metrics, noticed a few bugs with error handling
   when Stalwart is down: fixed
2025-12-09 09:15:37 +01:00
Pascal Bleser
1fc75a9091 groupware: jmap: add metrics 2025-12-09 09:15:37 +01:00
Pascal Bleser
5b51804744 groupware: implement metrics
* implement a framework for metrics, with a few exemplary ones
2025-12-09 09:15:37 +01:00
Pascal Bleser
0f3dac0280 groupware: Etag handling
* implement correct Etag and If-None-Match handling, responding with
   304 Not Modified if they match

 * introduce SessionState and State string type aliases to ensure we are
   using the correct fields for those, respectively

 * extract the SessionState from the JMAP response bodies in the
   groupware framework instead of having to do that in every single
   groupware API

 * use uint instead of int in some places to clarify that the values are
   >= 0

 * trace-log how long a Session was held in cache before being evicted

 * add Trace-Id header handling: add to response when specified in
   request, and implement a custom request logger to include it as a
   field

 * implement a more compact trace-logging of all the methods and URIs
   that are served, to put them into a single log entry instead of
   creating one log entry for every URI
2025-12-09 09:15:36 +01:00
Pascal Bleser
d214cfa2b7 groupware: initial related emails implementation with SSE 2025-12-09 09:15:36 +01:00
Pascal Bleser
f97bc0e875 groupware: add /bootstrap
* add a GET /accounts/{a}/boostrap URI that delivers the same as GET /
   but also mailboxes for a given account, in case the UI remembers the
   last used account identifier, to avoid an additional roundtrip

 * streamline the use of simpleError()

 * add logging of errors at the calling site

 * add logging of evictions of Sessions from the cache

 * change default Session cache TTL to 5min instead of 30sec
2025-12-09 09:15:36 +01:00
Pascal Bleser
72ee47fdca groupware: swagger API documentation improvements
* add more documentation for properties

 * fixes after a bit of trial-and-error with go-swagger

 * fix email filter marshalling when there are no search criteria

 * introduce an apidoc.yml that contains Swagger data and is merged when
   generating the swagger.yml from sources
2025-12-09 09:15:36 +01:00
Pascal Bleser
8d9c3b0c4e Groupware improvements
* ensure that all the jmap responses contain the SessionState

 * implement missing errors that were marked as TODO

 * moved common functions from pkg/jmap and pkg/services/groupware to
   pkg/log and pkg/structs to commonalize them across both source trees

 * implement error handling for SetError occurences

 * Email: replace anonymous map[string]bool for mailbox rights with a
   MailboxRights struct, as the keys are well-defined, which allows for
   properly documenting them

 * introduce ObjectType as an "enum"

 * fix JSON marshalling and unmarshalling of EmailBodyStructure

 * move the swagger documentation structs from groupware_api.go to
   groupware_docs.go

 * fix: change verb for /groupware/accounts/*/vacation from POST to PUT
2025-12-09 09:15:36 +01:00
Pascal Bleser
084eb005e3 groupware: minor email searching response improvements + started implementing vacation response setting API 2025-12-09 09:15:36 +01:00
Pascal Bleser
2bdbc5a42e groupware: add identities of all accounts to the index resource 2025-12-09 09:15:36 +01:00
Pascal Bleser
0a5d13b916 groupware: fix email search, add variant that includes the full emails 2025-12-09 09:15:36 +01:00
Pascal Bleser
446a98dd62 groupware: fix email search, add variant that includes the full emails 2025-12-09 09:15:36 +01:00
Pascal Bleser
e6441e58d4 Groupware: refactor jmap package, implement Email/set, EmailSubmission
* refactor the jmap package to split it into several files as the
   jmap.api.go file was becoming too unwieldy

 * refactor the Groupware handler function response to be a Response
   object, to be more future-proof and avoid adding more and more
   return parameters while handling "no content" response as well

 * more godoc for the JMAP model

 * add Email creation, updating, deleting (Email/set,
   EmailSubmission/set)

 * add endpoints
   - POST /accounts/{accountid}/messages
   - PATCH|PUT /accounts/{accountid}/messages/{messageid}
   - DELETE /accounts/{accountid}/messages/{messageid}
2025-12-09 09:15:36 +01:00
Pascal Bleser
a64223fe7d groupware: implement message search with snippets 2025-12-09 09:15:36 +01:00
Pascal Bleser
6e4918b50b groupware: blob streaming (upload and download) 2025-12-09 09:15:36 +01:00
Pascal Bleser
ac8d2587c9 groupware: more JMAP operations implementation 2025-12-09 09:15:36 +01:00
Pascal Bleser
0d2a5e992c groupware: further implementation and improvements 2025-12-09 09:15:36 +01:00
Pascal Bleser
1b9249ecba upgrade Stalwart to 0.13.2 2025-12-09 09:15:36 +01:00
Pascal Bleser
94c932d6a7 refactored the Session object, refactored the services/groupware directory, and started Swagger documentation implementation 2025-12-09 09:15:36 +01:00
Pascal Bleser
8be4d11a5e groupware: refactoring the API mechanisms 2025-12-09 09:15:36 +01:00
Pascal Bleser
2191b1d011 groupware: implement JSON:API's error response format, with a revamped error handling in jmap and services/groupware 2025-12-09 09:15:36 +01:00
Pascal Bleser
07522ce79a Refactor groupware service after ADR decision on the Groupware API
* after having decided that the Groupware API should be a standalone
   independent custom REST API that is using JMAP data models as much as
   possible,
 * removed Groupware APIs from the Graph service
 * moved Groupware implementation to the Groupware service, and
   refactored a few things accordingly
2025-12-09 09:15:36 +01:00
Pascal Bleser
d544efdec7 Groupware and jmap: cleanup and API documentation 2025-12-09 09:15:36 +01:00
Pascal Bleser
8df4ef67a2 groupware: remove unneeded messages.go that was a remainder from an earlier implementation attempt, which also fixes compilation issues due to changes in main 2025-12-09 09:15:36 +01:00
Pascal Bleser
2412e64cc5 opencloud_full: upgrade Stalwart to 0.12.5, and use the ghcr.io container repository to avoid Hub limits 2025-12-09 09:15:36 +01:00
Pascal Bleser
3f8076aa46 Groupware improvements: refactoring, k6 tests
* refactored the models to be strongly typed with structs and mapstruct
   to decompose the dynamic parts of the JMAP payloads

 * externalized large JSON strings for tests into .json files under
   testdata/

 * added a couple of fantasy Graph groupware APIs to explore further
   options

 * added k6 scripts to test those graph/me/messages APIs, with a setup
   program to set up users in LDAP, fill their IMAP inbox, activate them
   in Stalwart, cleaning things up, etc...
2025-12-09 09:15:36 +01:00
Pascal Bleser
5920291ec7 fix Stalwart LDAP configuration 2025-12-09 09:15:36 +01:00
Pascal Bleser
772a902f6d Use password policy overlay in LDAP and configure Stalwart to use it 2025-12-09 09:15:36 +01:00
Pascal Bleser
e0ea733489 upgrade Stalwart to 0.12.4 2025-12-09 09:15:36 +01:00
Pascal Bleser
22e51bd4a1 groupware: removed debugging logs 2025-12-09 09:15:36 +01:00
Pascal Bleser
0f47e3aca8 jwkset: remove debugging printlns 2025-12-09 09:15:36 +01:00
Pascal Bleser
b3766abba5 auth-api: fix: was missing newly introduced metrics 2025-12-09 09:15:36 +01:00
Pascal Bleser
71cddaaf3c groupware and jmap improvements and refactoring 2025-12-09 09:15:36 +01:00
Pascal Bleser
a6cdb4e863 upgrade Stalwart to 0.12 2025-12-09 09:15:36 +01:00
Pascal Bleser
02f33bd1d8 minor corrections to the Stalwart configuration 2025-12-09 09:15:36 +01:00
Pascal Bleser
ebd58fcfdb Introduce a the auth-api service
* primitive implementation to demonstrate how it could work, still to
   be considered WIP at best

 * add new dependency: MicahParks/jwkset and MicahParks/keyfunc to
   retrieve the JWK set from KeyCloak to verify the signature of the
   JWTs sent as part of Bearer authentication in the /auth API

 * (minor) opencloud/.../service.go: clean up a logging statement that
   was introduced earlier to hunt down why the auth-api service was not
   being started
2025-12-09 09:15:36 +01:00
Pascal Bleser
4e6053cdbd add an auth-api service to make an exemplary implementation of an external authentication API for third party services such as Stalwart 2025-12-09 09:15:36 +01:00
Pascal Bleser
4cf4d44321 move services/groupware/pkg/jmap to pkg/jmap 2025-12-09 09:15:36 +01:00
Pascal Bleser
da9ed5f44b WIP: restructure the Jmap client, and implement the /me/messages Graph API endpoint with it 2025-12-09 09:15:36 +01:00
Pascal Bleser
6da208e754 add an OIDC Directory to Stalwart, requires exposing Keycloak port 8080 directly to access the userinfo endpoint using HTTP since the certificates in traefik are self-signed and end up being rejected by Stalwart with no option to bypass the certificate check 2025-12-09 09:15:36 +01:00
Pascal Bleser
6620313b43 rename Stalwart fallback admin username from 'admin' to 'mailadmin' since 'admin' exists as a regular user in LDAP and thus won't have access to the administration 2025-12-09 09:15:36 +01:00
Pascal Bleser
72af257cbd add missing routing for /groupware (currently unprotected for testing) 2025-12-09 09:15:36 +01:00
Pascal Bleser
d638fba8c2 WIP: initial implementation of the groupware service 2025-12-09 09:15:36 +01:00
Pascal Bleser
0435d5679d Add Stalwart container to the opencloud_full deployment, using the OpenLDAP container as a directory for user authentication 2025-12-09 09:15:36 +01:00
Sawjan Gurung
8e2fab3c9d Merge pull request #1990 from opencloud-eu/test/fix-resource-checks
[full-ci][tests-only] test: proper resource existence check
2025-12-09 12:12:03 +05:45
Saw-jan
c3a7892889 test: proper resource existence check
Signed-off-by: Saw-jan <saw.jan.grg3e@gmail.com>
2025-12-09 10:51:06 +05:45
Viktor Scharf
db7c0a88dd set backport feature (#1973) 2025-12-06 17:13:07 +01:00
Michael Barz
64119b3f8a fix: enhance resource creation with detailed process information (#1978)
Co-authored-by: Stavros Kois <s.kois@outlook.com>
2025-12-05 15:08:39 +01:00
Viktor Scharf
6c171e11a2 check propfing after renaming data in file system (#1809) 2025-12-05 09:11:23 +01:00
Viktor Scharf
7318fde6a0 fix-get-attribute-test (#1974) 2025-12-04 14:24:57 +01:00
Viktor Scharf
6ce0cc6b1f replace golang image (#1955) 2025-12-03 15:02:25 +01:00
dependabot[bot]
3e81d1f1d8 build(deps): bump github.com/testcontainers/testcontainers-go
Bumps [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-03 12:12:51 +01:00
Jannik Stehle
d352d91210 Merge pull request #1965 from opencloud-eu/ci/chat-notification-url
ci: use secret for the chat notifications url
2025-12-03 11:53:49 +01:00
Jannik Stehle
434ba0a30a ci: use secret for the chat notifications url 2025-12-03 11:08:53 +01:00
opencloudeu
0f448f23a0 [tx] updated from transifex 2025-12-03 00:02:26 +00:00
Artur Neumann
babb97f8a6 Merge pull request #1956 from opencloud-eu/individual-it-patch-1
fix the link in quickstart script for itself
2025-12-02 21:11:25 +05:45
Artur Neumann
a6d637456d fix the link in quickstart script for itself
see also https://docs.opencloud.eu/docs/admin/intro#quick-start
2025-12-02 19:24:27 +05:45
OpenCloud Devops
986545da52 🎉 Release 4.0.0 (#1770)
* 🎉 Release 3.7.1

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0

* 🎉 Release 4.0.0
2025-12-01 10:30:14 +01:00
Michael Barz
0515f2f53c fix: no tag prefix for containers (#1945) 2025-12-01 10:09:40 +01:00
opencloudeu
7307cda74d [tx] updated from transifex 2025-11-30 00:02:54 +00:00
Michael Barz
7778eab752 chore: add new production version (#1941) 2025-11-29 14:13:52 +01:00
opencloudeu
778580545b [tx] updated from transifex 2025-11-29 00:02:28 +00:00
Viktor Scharf
2bdd98f5cf [full-ci] revaBump-v2.40.1 (#1927)
* revaBump-v2.40.0

* adapt tests

* bring-#442

* adapt tests

* bring-#444

* ocm fixes

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* adapt tests

* adapt unit tests

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* revaUpdate-2.40.1

* update opencloud-version-4.0.0-rc.3

---------

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-28 17:34:12 +01:00
Jörn Friedrich Dreyer
043a5cf951 Merge pull request #1940 from opencloud-eu/antivirus-readme-typos
Fix typos in antivirus README documentation
2025-11-28 15:42:59 +01:00
Michael Flemming
f7ce9202de Merge pull request #1937 from opencloud-eu/add_image_signing
Add image signing
2025-11-28 14:49:30 +01:00
Michael 'Flimmy' Flemming
287cc21981 add image signing with notation 2025-11-28 14:25:19 +01:00
Jürgen Weigert
d274f42aa8 Fix typos in antivirus README documentation 2025-11-28 14:20:53 +01:00
Florian Schade
de246ddc8f Merge pull request #1936 from opencloud-eu/dedicated-events-tls-insecure
introduce OC_EVENTS_TLS_INSECURE
2025-11-28 13:40:26 +01:00
Benedikt Kulmann
9e1c22b616 Merge pull request #1938 from opencloud-eu/bump-web-4.2.1
[full-ci] chore: bump web to v4.2.1
2025-11-28 13:10:55 +01:00
Michael Flemming
5ccba1f336 Merge pull request #1935 from opencloud-eu/add_heinlein_registry
add heinlein registry as push target
2025-11-28 11:51:12 +01:00
Benedikt Kulmann
c18489687f chore: bump web to v4.2.1 2025-11-28 11:47:56 +01:00
Jörn Friedrich Dreyer
56817b7de7 introduce OC_EVENTS_TLS_INSECURE
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-28 11:17:39 +01:00
Michael 'Flimmy' Flemming
48d715008a add heinlein registry as push target 2025-11-28 10:55:52 +01:00
Jörn Friedrich Dreyer
10913ca00a Merge pull request #1918 from opencloud-eu/otlp-tracing
update otlp tracing
2025-11-27 12:57:26 +01:00
Christian Richter
444af91cce Merge pull request #1714 from MahdiBaghbani/feature-ocm-wayf
feat(ocm): add WAYF configuration for reva OCM service
2025-11-27 12:55:59 +01:00
Jörn Friedrich Dreyer
a3ef7f6d79 update otlp tracing
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-27 12:28:15 +01:00
Christian Richter
4b5fc32b81 Merge pull request #1926 from fschade/issue-1920-bump_pp_next_pp
chore: bump %%NEXT%%
2025-11-27 11:57:00 +01:00
fschade
60501659c5 chore: bump %%NEXT%% 2025-11-27 10:53:59 +01:00
Ralf Haferkamp
aa44a5f6ed tests: Wait for post-processing to finish before editing the file
Otherwise the test is racy. The file might still be stuck in
post-processing so the admin would update an empty file.
2025-11-26 17:03:39 +01:00
dependabot[bot]
288dd8c220 build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.76.0 to 1.77.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.76.0...v1.77.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-26 16:18:07 +01:00
dependabot[bot]
8a70a65597 build(deps): bump github.com/nats-io/nats-server/v2
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.12.1 to 2.12.2.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml)
- [Commits](https://github.com/nats-io/nats-server/compare/v2.12.1...v2.12.2)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-26 16:17:43 +01:00
Ralf Haferkamp
3badc66d4a fix: adapt to new function signatures
To allow to bump to latest kovidgoyal/imaging release
2025-11-26 14:46:30 +01:00
dependabot[bot]
85361fca67 build(deps): bump github.com/kovidgoyal/imaging from 1.7.2 to 1.8.17
Bumps [github.com/kovidgoyal/imaging](https://github.com/kovidgoyal/imaging) from 1.7.2 to 1.8.17.
- [Release notes](https://github.com/kovidgoyal/imaging/releases)
- [Changelog](https://github.com/kovidgoyal/imaging/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/kovidgoyal/imaging/compare/v1.7.2...v1.8.17)

---
updated-dependencies:
- dependency-name: github.com/kovidgoyal/imaging
  dependency-version: 1.8.17
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-26 14:46:30 +01:00
dependabot[bot]
a1862a65d9 build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-26 13:04:25 +01:00
Jörn Friedrich Dreyer
023412356c Merge pull request #1888 from opencloud-eu/kill-unused-env-vars
kill unused env vars
2025-11-26 11:45:45 +01:00
Michael Flemming
7a469d6e44 Merge pull request #1919 from opencloud-eu/fix_rc_handling
rc-handling was only active for the dryrun, not the real build-and-push
2025-11-26 11:36:49 +01:00
Michael 'Flimmy' Flemming
f917ae6bca rc-handling was only active for the dryrun, not the real build-and-push 2025-11-26 11:32:09 +01:00
Viktor Scharf
a487621b1d update opencloud 4.0.0-rc.2 (#1917) 2025-11-26 10:16:44 +01:00
Jörn Friedrich Dreyer
fe83b6b0af bump alpine to v3.22 (#1913)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-26 08:07:44 +01:00
Jörn Friedrich Dreyer
52d31ca8ef log missing name or id attributes (#1914)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-26 08:06:05 +01:00
opencloudeu
63b5723883 [tx] updated from transifex 2025-11-26 00:03:14 +00:00
Jörn Friedrich Dreyer
aa48ecefe0 Merge pull request #1905 from opencloud-eu/bump-reva-4acb0bf96c4
bump reva to 2.39.3
2025-11-25 10:08:33 +01:00
Artur Neumann
12cebc705e Merge pull request #1902 from opencloud-eu/disableRunningTestWithWatchFS
[full-ci] disable running ci with watch fs when full-ci
2025-11-25 14:48:34 +05:45
Jörn Friedrich Dreyer
2bcf66394f bump reva v2.39.3
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-25 09:23:08 +01:00
Jörn Friedrich Dreyer
b7308d661e Merge pull request #1901 from opencloud-eu/handle-objectguid-endianness
handle objectguid endianess
2025-11-25 08:26:12 +01:00
Viktor Scharf
5f7f096d89 disable running ci with watch fs when full-ci 2025-11-24 16:56:56 +01:00
Benedikt Kulmann
ac7ee2216e Merge pull request #1900 from opencloud-eu/bump-web-v4.2.1-rc.1
chore: bump web to v4.2.1-rc.1
2025-11-24 16:40:36 +01:00
Viktor Scharf
7330c7b0b4 trigger ci 2025-11-24 16:14:27 +01:00
Jörn Friedrich Dreyer
4340cdc9e6 handle objectguid endianess
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-24 15:53:41 +01:00
Benedikt Kulmann
de4ca7c473 chore: bump web to v4.2.1-rc.1 2025-11-24 15:07:34 +01:00
opencloudeu
a181049508 [tx] updated from transifex 2025-11-24 00:02:52 +00:00
opencloudeu
718e86b06e [tx] updated from transifex 2025-11-23 00:03:05 +00:00
Benedikt Kulmann
487a2a0aa6 fix: add update server to default csp rules (#1875)
* fix: add update server to default csp rules

* adapt tests

---------

Co-authored-by: Viktor Scharf <v.scharf@opencloud.eu>
2025-11-21 17:13:22 +01:00
Alex
a496b6f46b fix: add missing capability flag support-radicale (#1891) 2025-11-21 15:39:46 +01:00
Jörn Friedrich Dreyer
c1fcf71d42 Merge pull request #1890 from opencloud-eu/fix-opensearch-client-cert
fix opensearch client certificate

well ... technically it is not a fix. We expected the certificate on the CLI to be in PEM format. so, it would have worked if you used sth. like:
```console
export SEARCH_ENGINE_OPEN_SEARCH_CLIENT_CA_CERT="-----BEGIN CERTIFICATE-----
MIIDXTCCAkWgAwIBAgIJAKJ...
...
-----END CERTIFICATE-----"
```

which was different than all our other cert env vars, which take a path.
2025-11-21 15:15:48 +01:00
Viktor Scharf
d1fa52b603 revaBump-getting#428 (#1887) 2025-11-21 13:11:10 +01:00
Jörn Friedrich Dreyer
538e8141b2 fix opensearch client certificate
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-21 12:23:07 +01:00
Jörn Friedrich Dreyer
62bcd91019 kill unused env vars
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-21 11:58:39 +01:00
opencloudeu
ba71d2978a [tx] updated from transifex 2025-11-21 00:03:13 +00:00
dependabot[bot]
4ae0951f5f build(deps): bump github.com/blevesearch/bleve/v2 from 2.5.4 to 2.5.5
Bumps [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) from 2.5.4 to 2.5.5.
- [Release notes](https://github.com/blevesearch/bleve/releases)
- [Commits](https://github.com/blevesearch/bleve/compare/v2.5.4...v2.5.5)

---
updated-dependencies:
- dependency-name: github.com/blevesearch/bleve/v2
  dependency-version: 2.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-20 17:41:01 +01:00
Ralf Haferkamp
e85d8effc1 Bump reva
Fixes: #1871, #1867
2025-11-20 14:58:30 +01:00
Michael Flemming
90e4127227 Merge pull request #1881 from opencloud-eu/fix_rc_latest_overwrite 2025-11-20 14:14:41 +01:00
dependabot[bot]
28148d02bd build(deps): bump github.com/olekukonko/tablewriter from 1.1.0 to 1.1.1
Bumps [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter) from 1.1.0 to 1.1.1.
- [Commits](https://github.com/olekukonko/tablewriter/compare/v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: github.com/olekukonko/tablewriter
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-20 11:50:20 +01:00
Michael 'Flimmy' Flemming
205ffbbe83 add logic to skip latest tag for pre-releases 2025-11-20 11:27:57 +01:00
Viktor Scharf
9d173f0ea6 api-tests: delete spaces before users (#1877)
* delete spaces before users

* delete users after deleting spaces

* fix
2025-11-20 09:12:48 +01:00
Thomas Schweiger
6161e40d43 Merge pull request #1859 from opencloud-eu/fix/create-missing-readme-files
fix: add missing service README.md files with basic description
2025-11-19 19:16:16 +01:00
Christian Richter
95b19c7e33 Merge pull request #1617 from dragonchaser/merge-csp-configs
load two yaml configs
2025-11-19 14:20:43 +01:00
Christian Richter
97ee9b36a5 incorporate requested changes
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-19 09:38:16 +01:00
Christian Richter
f9807f9f3a actually load overrideyaml
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-19 09:38:16 +01:00
Christian Richter
8007e8a269 add ability to completely override csp config
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-19 09:38:16 +01:00
Christian Richter
63603679a5 remove obsolete comment
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-19 09:38:16 +01:00
Christian Richter
16f9667fe8 adapt tests & deepmerge
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-19 09:38:16 +01:00
Christian Richter
d16524510a adapt tests
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-19 09:38:16 +01:00
Christian Richter
20b903b32d load two yaml configs
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-19 09:38:16 +01:00
Viktor Scharf
aa2ff8bdc6 update tika version 2025-11-18 17:37:46 +01:00
dependabot[bot]
93381c163b build(deps): bump golang.org/x/term from 0.36.0 to 0.37.0
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.36.0 to 0.37.0.
- [Commits](https://github.com/golang/term/compare/v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-18 15:15:08 +01:00
opencloudeu
dd5eca9c6f [tx] updated from transifex 2025-11-18 00:03:01 +00:00
Michael Barz
54a38e37c6 Apply suggestions from code review
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-17 10:43:44 +01:00
Jörn Friedrich Dreyer
4de25fdb5e Apply suggestions from code review 2025-11-17 10:41:17 +01:00
opencloudeu
1da40e6f5d [tx] updated from transifex 2025-11-17 00:03:00 +00:00
opencloudeu
0c43f69a5a [tx] updated from transifex 2025-11-16 00:02:54 +00:00
opencloudeu
8b758e8852 [tx] updated from transifex 2025-11-15 00:02:53 +00:00
Thomas Schweiger
aa2da8372b fix: add missing service README.md files with basic description 2025-11-14 12:24:01 +01:00
Michael Barz
5c7f58c8b5 fix: correct README.md files which contain broken or missing links (#1854)
Co-authored-by: Thomas Schweiger <t.schweiger@opencloud.eu>
2025-11-14 11:22:30 +01:00
Jörn Friedrich Dreyer
cca5d1af04 Merge pull request #1849 from opencloud-eu/bump-reva-2.39.2
reva-bump-2.39.2. update opencloud 4.0.0-rc.1
2025-11-14 10:37:00 +01:00
Viktor Scharf
60dfc95130 adapt tests 2025-11-13 18:03:03 +01:00
Viktor Scharf
c685d280f5 reva update bring #419 2025-11-13 17:46:50 +01:00
Christian Richter
acc38eb739 Merge pull request #1732 from dragonchaser/make-user-cache-tenant-aware
make user cache tenant aware
2025-11-13 10:45:18 +01:00
Christian Richter
bb797e3727 fix related tests
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-13 09:45:49 +01:00
Viktor Scharf
b73353ef9b fix flaky test 2025-11-13 09:32:07 +01:00
Thomas Schweiger
58a73c6306 Merge pull request #1851 from opencloud-eu/fix/doc-code-sanitising
fix: sanitise markdow code to make docusaurus happy
2025-11-13 08:21:56 +01:00
Viktor Scharf
68ad1e52c4 reva-bump-2.39.2. update opencloud 4.0.0-rc.1 2025-11-12 20:26:41 +01:00
Christian Richter
2189edaa17 remove obsolete code
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-12 17:52:29 +01:00
Christian Richter
28fdfded71 incorporate requested changes
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-12 17:50:28 +01:00
Thomas Schweiger
b0405d8eb6 fix: sanitise markdow code to make docusaurus happy 2025-11-12 17:23:21 +01:00
Jörn Friedrich Dreyer
cd3101ca31 Merge pull request #1843 from opencloud-eu/update-launch-json
update launch.json
2025-11-12 16:49:20 +01:00
Ralf Haferkamp
7d193c78dd docs: Fix auth-app examples in README
We return UUIDs for the token not the actually token hash since at least
OpenCloud 2.0.0

Related: #1832
2025-11-12 15:48:38 +01:00
Mikel Olasagasti Uranga
06b78b8261 chore: drop gofrs/uuid module usage and use google/uuid
Signed-off-by: Mikel Olasagasti Uranga <mikel@olasagasti.info>
2025-11-12 11:47:13 +01:00
dependabot[bot]
c76ba6f8c3 build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.17.0 to 0.18.0.
- [Commits](https://github.com/golang/sync/compare/v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-12 11:37:21 +01:00
Jörn Friedrich Dreyer
580cbd45a3 update launch.json
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-11-12 11:29:57 +01:00
Viktor Scharf
0b2e0fb124 add share sync to collaborativePosix suite 2025-11-12 10:38:35 +01:00
opencloudeu
650cff8331 [tx] updated from transifex 2025-11-12 00:02:29 +00:00
dependabot[bot]
a63c0c5e9a build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.32.0 to 0.33.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-11 09:43:32 +01:00
Jörn Friedrich Dreyer
6a84d20f5c Merge pull request #1826 from opencloud-eu/fix/typo-in-treesize-logging
fix: fix typo in treesize logging
2025-11-10 16:18:06 +01:00
Thomas Schweiger
30aad21936 fix: fix typo in treesize logging 2025-11-10 14:54:35 +01:00
Pascal Bleser
1827e143cd enhancement(runtime): improve logging in supervised crashes
When events occur in the supervisor, log them as FATAL when appropriate
(panic and termination when not restarting) instead of always using
INFO, and include more information such as the service name and the
current failures, etc..., rather than the generic message that was used
so far.
2025-11-10 10:39:09 +01:00
dependabot[bot]
12ec18be5c build(deps): bump github.com/KimMachineGun/automemlimit
Bumps [github.com/KimMachineGun/automemlimit](https://github.com/KimMachineGun/automemlimit) from 0.7.4 to 0.7.5.
- [Release notes](https://github.com/KimMachineGun/automemlimit/releases)
- [Commits](https://github.com/KimMachineGun/automemlimit/compare/v0.7.4...v0.7.5)

---
updated-dependencies:
- dependency-name: github.com/KimMachineGun/automemlimit
  dependency-version: 0.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 10:36:18 +01:00
Viktor Scharf
93d84478a4 removed test virus files from repo (#1812)
* remove virus file from repo

* doenload zip file

* adjust tests
2025-11-10 09:38:51 +01:00
dependabot[bot]
54684101f7 build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.9.0 to 1.10.1.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.9.0...v1.10.1)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 09:19:55 +01:00
Ralf Haferkamp
f02a23098a fix: allow 'make dev-docker' with go.work 2025-11-10 08:23:37 +01:00
opencloudeu
a6876b7df9 [tx] updated from transifex 2025-11-09 00:02:43 +00:00
opencloudeu
a98dff619e [tx] updated from transifex 2025-11-08 00:04:05 +00:00
Artur Neumann
29661cfa0b Merge pull request #1802 from opencloud-eu/increaseTimeoutForNotification
increase timeouts waiting for notification & search
2025-11-07 14:15:27 +05:45
Artur Neumann
76713480e3 increase wait for seach index 2025-11-07 13:23:55 +05:45
Artur Neumann
b783059846 increase timeout waiting for notification 2025-11-07 13:20:10 +05:45
Christian Richter
a044d87f10 fix related tests
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-07 08:26:09 +01:00
opencloudeu
b337e2675d [tx] updated from transifex 2025-11-07 00:03:20 +00:00
Christian Richter
7fe511d6df fix test and check in return
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Christian Richter
c3d7560652 rewrite test with multiple users
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Christian Richter
ae37684a79 fix GetUserTest without tennantId
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Christian Richter
26da21abe7 change key of the cache
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Christian Richter
e112ac7721 move idendity cache to subpackage
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Christian Richter
5af51b089f add tests
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Christian Richter
8ffabad1e4 check tennantId
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Christian Richter
1404c69597 change function headers & calls
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-11-06 18:01:58 +01:00
Ralf Haferkamp
96042752bb Bump reva
Fixes: #1774
2025-11-06 17:24:42 +01:00
Viktor Scharf
4ffb79b680 lint fix 2025-11-06 16:31:21 +01:00
Viktor Scharf
a0f90fee1a Sync share before action 2025-11-06 16:31:21 +01:00
opencloudeu
d8859757d9 [tx] updated from transifex 2025-11-06 00:02:59 +00:00
Ralf Haferkamp
bb776c7556 fix typo
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
2025-11-05 11:57:48 +01:00
Ralf Haferkamp
177afc41c7 fix: set global signing secret fallback correctly
When falling back to the transfer secret we need to set the global
cfg.URLSigningSecret as well otherwise the Validate() step fails.
2025-11-05 11:57:48 +01:00
Ralf Haferkamp
500487f2fa test: fix a few more collaborative posixfs test (#1777)
wait for postprocessing to complete before accessing files on disk

Related: #1747
2025-11-04 16:46:34 +01:00
Ralf Haferkamp
8a7d51ca88 Apply typo fixes from code review
Co-authored-by: Michael Barz <michael.barz@zeitgestalten.eu>
2025-11-04 16:45:08 +01:00
Ralf Haferkamp
a2f9cadd9f feat(collaboration): Set IsAnonymousUser flag for Collabora
Closes: #796
2025-11-04 16:45:08 +01:00
Ralf Haferkamp
30ef495c92 feat(collaboration): Set IsAdminUser property for Collabora
This set the 'IsAdminUser' Property correctly in the CheckFileInfo
Response. For that a new Permission 'WebOffice.Manage' is introduced. By
default this permission is only assigned to the Admin role.
User with this permission get access to certain admin features in
Collabora (e.g. the 'Server Audit' dashboard)

Closes: #796
2025-11-04 16:45:08 +01:00
dependabot[bot]
2da203613a build(deps): bump github.com/gabriel-vasile/mimetype (#1775)
Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.10 to 1.4.11.
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](https://github.com/gabriel-vasile/mimetype/compare/v1.4.10...v1.4.11)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-04 16:02:02 +01:00
Ralf Haferkamp
fcff855e16 feat: Add fallback for OC_URL_SIGNING_SECRET
When OC_URL_SIGNING_SECRET is not set. Fall back to the value of the
reva transfer token. This allows handling upgrades on a instance that
was created before the OC_URL_SIGNING_SECRET was introduced to be
handled more graceful.

Unfortunately this still only works reliably for single instance
deployments (or instance that where bootstrapped using 'opencloud init')
that are guaranteed to have the transfer token available.

When running 'proxy' and 'ocdav' as separate services the upgrade might
still require manual intervention.
2025-11-04 16:01:00 +01:00
Ralf Haferkamp
37609e52df feat!: Make the url signing secret a mandatory config option
This is required for allowing the web office to download images to
insert into documents.

The secret is generated by `opencloud init` and the server refuses
to start now without a secret being set. (Breaking Change)

Also the setting is now moved to the shared options as all involved
services need the same secret to work properly.

Related: https://github.com/opencloud-eu/web/issues/704
2025-11-04 16:01:00 +01:00
Ralf Haferkamp
589cee4ab3 collaboration: Enable InsertRemoteImage option
Related: https://github.com/opencloud-eu/web/issues/704
2025-11-04 16:01:00 +01:00
dependabot[bot]
dcaa1ceadb build(deps): bump github.com/nats-io/nats-server/v2
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.12.0 to 2.12.1.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml)
- [Commits](https://github.com/nats-io/nats-server/compare/v2.12.0...v2.12.1)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-04 15:41:03 +01:00
dependabot[bot]
6e0bb09aff build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.1 to 2.27.2
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.1 to 2.27.2.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.27.1...v2.27.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.27.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-04 12:51:49 +01:00
Viktor Scharf
59eb411024 correct STORAGE_USERS_POSIX_WATCH_FS env typo in CI (#1746)
* correct env typo

* set STORAGE_USERS_POSIX_SCAN_DEBOUNCE_DELAY=0

* tests: wait for postprocessing to finish before accessing files

---------

Co-authored-by: Ralf Haferkamp <r.haferkamp@opencloud.eu>
2025-11-04 10:22:06 +01:00
OpenCloud Devops
b53b4ef1de 🎉 Release 3.7.0 (#1723)
* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0

* 🎉 Release 3.7.0
2025-11-03 16:27:10 +01:00
Viktor Scharf
c05c740fa6 bump web 4.2.0 (#1765) 2025-11-03 15:55:36 +01:00
Artur Neumann
5b98860585 check status of postprocessing before accesing the file (#1762) 2025-11-03 14:13:46 +01:00
Benedikt Kulmann
a3c3b6a07c Merge pull request #1755 from opencloud-eu/update-gh-labels
chore: update labels
2025-11-03 13:43:44 +01:00
Mahdi Baghbani
2b68f59b78 fix: read directory service from url not file
Signed-off-by: Mahdi Baghbani <mahdi-baghbani@azadehafzar.io>
2025-11-02 11:14:15 +00:00
opencloudeu
790c6b165f [tx] updated from transifex 2025-11-02 00:03:10 +00:00
opencloudeu
a2935abe3d [tx] updated from transifex 2025-11-01 00:02:51 +00:00
Benedikt Kulmann
a4856b4a80 chore: update labels 2025-10-31 15:50:26 +01:00
Ralf Haferkamp
b5b15f29de bump reva
fixes: #1747
2025-10-30 17:17:27 +01:00
opencloudeu
e270cdbfd2 [tx] updated from transifex 2025-10-29 00:03:02 +00:00
Ralf Haferkamp
e2441696c2 graph(education): 'primaryRole' and 'identities' should be optional
Related: #1597
2025-10-28 12:56:42 +01:00
Ralf Haferkamp
28ec9c3282 graph(education): Make 'schoolNumber' attribute optional
It's already optional in the spec. For mulit-tenant provisioning
we want it to be optional as well.

Related: #1597
2025-10-28 12:56:42 +01:00
Shawn Wilsher
920a6916c4 fix: only search LDAP group by name 2025-10-28 10:22:54 +01:00
Thomas Schweiger
10e77768a5 Merge pull request #1708 from opencloud-eu/schweigisito/issue1698
fix: fix #1698 - Notification email doesn't contain Message-Id header
2025-10-27 20:59:06 +01:00
Thomas Schweiger
e7a4cbaae5 fix: fix #1698 - Notification email doesn't contain Message-ID header 2025-10-27 18:56:37 +01:00
OpenCloud Devops
e62e2e0f12 🎉 Release 3.6.0 (#1537)
* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.5.1

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0

* 🎉 Release 3.6.0
2025-10-27 16:26:38 +01:00
dependabot[bot]
9cb973baac build(deps): bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.26.0 to 2.27.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.26.0...v2.27.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-27 16:16:33 +01:00
Viktor Scharf
9e16bb9e29 bump-version-v3.6.0 (#1719) 2025-10-27 15:03:02 +01:00
Jörn Friedrich Dreyer
641dac0a88 Merge pull request #1718 from opencloud-eu/revaBump-2.39.1
revaBump-2.39.1
2025-10-27 14:12:01 +01:00
Viktor Scharf
570ec0bf97 revaBump-2.39.1 2025-10-27 13:30:13 +01:00
Jörn Friedrich Dreyer
aaaf5cf5c4 Merge pull request #1622 from opencloud-eu/shutdownorder
allow specifying a shutdown order
2025-10-27 13:13:04 +01:00
Florian Schade
fb8af22073 chore: bump reva (#1701)
* chore: bump reva

* enhancement(test): add postprocessing wait helper
2025-10-27 12:01:27 +01:00
Jörn Friedrich Dreyer
8c9f266ded allow specifying a shutdown order
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-10-27 11:58:14 +01:00
Viktor Scharf
f04f6ad470 [full-ci] feat: implement OIDC authentication option (#1676)
* feat: implement Bearer Token authentication option

* fix
2025-10-27 11:17:44 +01:00
Mahdi Baghbani
a004a9114f feat(ocm): add wayf configuration for reva ocm service
Signed-off-by: Mahdi Baghbani <mahdi-baghbani@azadehafzar.io>
2025-10-27 06:37:40 +00:00
opencloudeu
c887947a85 [tx] updated from transifex 2025-10-27 00:01:43 +00:00
opencloudeu
ac8be264f0 [tx] updated from transifex 2025-10-26 00:01:09 +00:00
Thomas Schweiger
2c18d5b010 fix: apply changes from other fixes in compose repo (#1707)
* fix: apply changes from other fixes in compose repo

* temporarily disabled e2e navigation step

---------

Co-authored-by: Viktor Scharf <v.scharf@opencloud.eu>
2025-10-24 22:10:27 +02:00
Viktor Scharf
44ee182aa3 apiTest-coverage for #1523 (#1660)
* apiTest-coverage for #1523

* check propfind contans correct files name

* bump reva for getting #381
2025-10-24 09:45:03 +02:00
dependabot[bot]
d76cacd99f build(deps): bump github.com/kovidgoyal/imaging from 1.6.4 to 1.7.2
Bumps [github.com/kovidgoyal/imaging](https://github.com/kovidgoyal/imaging) from 1.6.4 to 1.7.2.
- [Release notes](https://github.com/kovidgoyal/imaging/releases)
- [Changelog](https://github.com/kovidgoyal/imaging/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/kovidgoyal/imaging/compare/v1.6.4...v1.7.2)

---
updated-dependencies:
- dependency-name: github.com/kovidgoyal/imaging
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-23 17:48:43 +02:00
dependabot[bot]
fb94f34a1f build(deps): bump github.com/blevesearch/bleve/v2 from 2.5.3 to 2.5.4
Bumps [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) from 2.5.3 to 2.5.4.
- [Release notes](https://github.com/blevesearch/bleve/releases)
- [Commits](https://github.com/blevesearch/bleve/compare/v2.5.3...v2.5.4)

---
updated-dependencies:
- dependency-name: github.com/blevesearch/bleve/v2
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-23 17:47:05 +02:00
dependabot[bot]
0b4c9becfb build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-23 10:54:58 +02:00
dependabot[bot]
c362d84f11 build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.44.0 to 0.46.0.
- [Commits](https://github.com/golang/net/compare/v0.44.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-23 09:56:50 +02:00
opencloudeu
6e4e533e2c [tx] updated from transifex 2025-10-23 00:01:41 +00:00
Alex
f12a433b85 chore: add groupware capabilities (#1661) 2025-10-21 22:31:45 +02:00
Viktor Scharf
9108188e8a revaBumb: add groupware capabilities (#1689) 2025-10-21 14:27:26 +02:00
Viktor Scharf
18a6927b79 revaUpdate: adding groupware capabilities (#1659) 2025-10-20 19:19:12 +02:00
opencloudeu
3874c3e0d3 [tx] updated from transifex 2025-10-20 00:02:20 +00:00
opencloudeu
254f999382 [tx] updated from transifex 2025-10-16 08:04:58 +00:00
Ralf Haferkamp
b099dcdf6e fix: 'readyz' enpdoint check only required service
The readyz endpoint contained unconditional checks for the LDAP and nats
endpoints. Depending on configuration neihter LDAP nor NATS might be
required.
2025-10-14 16:49:46 +02:00
Ralf Haferkamp
d1a6cc22c1 graph: Allow the service to run without a NatsJS server
For running the Graph Education API we want to keep it possible
to run the service standalone. With an LDAP server as the only
external dependency.
2025-10-14 16:49:46 +02:00
Viktor Scharf
6c387336e1 chore/bump-web-4.1.0 (#1652)
CI shows a false failure. merge it
2025-10-13 16:09:44 +02:00
Ralf Haferkamp
805bd4305e bump reva to lastest main
for https://github.com/opencloud-eu/reva/pull/372
2025-10-13 15:22:00 +02:00
opencloudeu
d080d7415e [tx] updated from transifex 2025-10-13 00:01:42 +00:00
opencloudeu
4b2e6e4695 [tx] updated from transifex 2025-10-12 00:01:38 +00:00
Viktor Scharf
c916528788 [full-ci] deleted unused step definitions (#1639)
* deleted unused step definitions

* fix flaky tests. rearange ine numbers
2025-10-10 11:34:43 +02:00
opencloudeu
ba7aad174f [tx] updated from transifex 2025-10-09 00:05:33 +00:00
Ralf Haferkamp
e9a2ba8afc fix(settings): env var precedence
Fix the ordering of the env vars for the 'set_default_assignments'
setting. The service specific variable ('SETTINGS_SETUP_DEFAULT_ASSIGNMENTS')
should take precedence over other variable ('IDM_CREATE_DEMO_USERS' in
this case).
2025-10-08 18:06:35 +02:00
fschade
c0244fc977 enhancement(graph): resolve review feedback such as, use fmt for error wrapping, make use of store auth options, use a dedicated jetstream package 2025-10-08 16:45:16 +02:00
Christian Richter
2ca88e66da add mocks for natskv
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
53e2398f7a set server loglevel to error
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
bcafd97e31 Catch bucket not found error
Co-authored-by: Jörn Dreyer <jfd@butonic.de>

Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
006051322f set server loglevel to debug
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
351f4e6be2 Mock nats & adapt tests
Co-authored-by: Florian Schade <f.schade@opencloud.eu>

Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
5225b66f65 Move keyvalue initialisation to options
Co-authored-by: Florian Schade <f.schade@opencloud.eu>

Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Viktor Scharf
07a8fef80e fix clicommand test 2025-10-08 16:45:16 +02:00
Viktor Scharf
0399398bc8 do not save edited users 2025-10-08 16:45:16 +02:00
Viktor Scharf
681ed49dc4 deleting user by userId in test 2025-10-08 16:45:16 +02:00
Christian Richter
098ed082c8 attempt to fix broken soft delete
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
813edc4a59 use standard errors package
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
f7454e576a remove obsolete properties
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
800c7bc863 revert faulty replaces
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
ef920b040a add missing pointer
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
b815a6e0a1 respect ldap settings, add comments
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
cd295dfd9e add persistance function & userstate
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
Christian Richter
07a9308c4c add nats-js-kv connection to graph
Signed-off-by: Christian Richter <c.richter@opencloud.eu>

# Conflicts:
#	services/graph/pkg/service/v0/service.go
2025-10-08 16:45:16 +02:00
Christian Richter
63f976cac1 add nats-js-kv persistance to graph
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-10-08 16:45:16 +02:00
dependabot[bot]
0298e1cead build(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.75.1 to 1.76.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.75.1...v1.76.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-08 14:25:43 +02:00
dependabot[bot]
ef507b1241 build(deps): bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.15.0 to 3.16.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-08 11:35:44 +02:00
dependabot[bot]
32ebeb1997 build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2
Bumps [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) from 2.27.2 to 2.27.3.
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.2...v2.27.3)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-07 08:23:20 +02:00
dependabot[bot]
8b35fa46f2 build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.11 to 3.4.12
Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.11 to 3.4.12.
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](https://github.com/go-ldap/ldap/compare/v3.4.11...v3.4.12)

---
updated-dependencies:
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-version: 3.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-07 08:22:49 +02:00
Viktor Scharf
2fba3c5cdd check thumbnails in the share with me response (#1605)
* check thumbnails in the share with me response

* check preview in report response
2025-10-07 07:43:46 +02:00
opencloudeu
38b1a0feb0 [tx] updated from transifex 2025-10-07 00:01:20 +00:00
Prashant Gurung
d5eadeccda fix restore browsers cache workflow (#1615)
Signed-off-by: prashant-gurung899 <prasantgrg777@gmail.com>
2025-10-06 15:40:34 +02:00
Ralf Haferkamp
9ec532da93 deps: Bump reva to latest main
for getting https://github.com/opencloud-eu/reva/pull/360
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
f096285769 feat(groups): Only allow the "null" driver for multi-tenant setups 2025-10-06 11:21:57 +02:00
Ralf Haferkamp
736fb9db1f fix: make storage system user a service account
The reva auth-middleware blocks users without a tenant id, expect
system users.
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
7b5c59e827 feat(reva): Pass the multi-tenancy flag to reva services
This allows to pass the multi-tenant enablement flag as a shared config
option to the reva service. This needs to be done for all reva services
since it ends up in a global variable in reva that is only initialized
once, by the service that is the first to parse its config.
See https://github.com/opencloud-eu/opencloud/issues/1563 for details.
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
8cea8c8cfd feat(proxy): account_resolver multi-tenancy
Make the account resolve reject users without a tenantid, when
multi-tenancy is enabled.
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
b1c50ea5a0 feat(graph): validate identity backend value 2025-10-06 11:21:57 +02:00
Ralf Haferkamp
7e86d85d62 feat: Add a global flag to enable multi-tenant support
When enabled the graph service refuses to start with the "ldap" backend.
Additional enforcements will follow in subsequent commits.
2025-10-06 11:21:57 +02:00
opencloudeu
bbf30b5802 [tx] updated from transifex 2025-10-05 00:02:32 +00:00
dependabot[bot]
4649c6ec42 build(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10
Bumps google.golang.org/protobuf from 1.36.9 to 1.36.10.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-02 17:10:56 +02:00
dependabot[bot]
4c00db867c build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.25.3 to 2.26.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.25.3...v2.26.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-02 17:10:28 +02:00
2142 changed files with 188922 additions and 244911 deletions

View File

@@ -1,706 +0,0 @@
# aider chat started at 2025-05-27 11:10:03
> Newer aider version v0.83.2 is available.
> /home/jfd/.local/share/uv/tools/aider-chat/bin/python -m pip install --upgrade --upgrade-strategy only-if-needed aider-chat
> Run pip install? (Y)es/(N)o [Yes]: y
> Re-run aider to use new version.
# aider chat started at 2025-05-27 11:12:19
> You can skip this check with --no-gitignore
> Add .aider* to .gitignore (recommended)? (Y)es/(N)o [Yes]: n
> /home/jfd/.local/bin/aider
> Using openrouter/google/gemini-2.5-pro-exp-03-25:free model with API key from environment.
> Aider v0.83.2
> Model: openrouter/google/gemini-2.5-pro-exp-03-25:free with whole edit format
> Git repo: .git with 12,310 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 4096 tokens, auto refresh
> https://aider.chat/HISTORY.html#release-notes
> Would you like to see what's new in this version? (Y)es/(N)o [Yes]: n
# aider chat started at 2025-08-08 20:08:04
> Newer aider version v0.85.5 is available.
> /home/jfd/.local/share/uv/tools/aider-chat/bin/python -m pip install --upgrade --upgrade-strategy only-if-needed aider-chat
> Run pip install? (Y)es/(N)o [Yes]: y
> Re-run aider to use new version.
# aider chat started at 2025-08-08 20:08:26
> You can skip this check with --no-gitignore
> Add .aider* to .gitignore (recommended)? (Y)es/(N)o [Yes]: y
> Added .aider* to .gitignore
> /home/jfd/.local/bin/aider --model ollama/qwen3-coder:latest
> Warning for ollama/qwen3-coder:latest: Unknown context window size and costs, using sane defaults.
> You can skip this check with --no-show-model-warnings
> https://aider.chat/docs/llms/warnings.html
> Open documentation url for more info? (Y)es/(N)o/(D)on't ask again [Yes]: n
> Aider v0.85.5
> Model: ollama/qwen3-coder:latest with whole edit format
> Git repo: .git with 12,459 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 1024 tokens, auto refresh
> https://aider.chat/HISTORY.html#release-notes
> Would you like to see what's new in this version? (Y)es/(N)o [Yes]: y
# aider chat started at 2025-08-08 20:09:18
> /home/jfd/.local/bin/aider --model ollama/qwen3-coder:latest
> Aider v0.85.5
> Model: ollama/qwen3-coder:latest with whole edit format
> Git repo: .git with 12,459 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 4096 tokens, auto refresh
#### /ask what is this codebase about
#### what is this codebase about
> Initial repo scan can be slow in larger repos, but only happens once.
Dieser Codebase scheint eine Sammlung von Go-Bibliotheken zu sein, die für verschiedene Zwecke verwendet werden können, darunter:
* **Validierung:** Bibliotheken wie `github.com/invopop/validation` und `github.com/go-ldap/ldap/v3` bieten Funktionen zur Datenvalidierung.
* **Reguläre Ausdrücke:** `github.com/dlclark/regexp2` ist eine Go-Bibliothek für reguläre Ausdrücke.
* **Datenbankzugriff:** `github.com/mattn/go-sqlite3` ermöglicht den Zugriff auf SQLite-Datenbanken.
* **HTTP-Client und -Server:** Bibliotheken wie `github.com/aws/aws-sdk-go`, `github.com/go-git/go-git/v5`, `github.com/segmentio/kafka-go` und `github.com/go-redis/redis/v8` bieten Funktionen für HTTP-Anfragen, Dateioperationen, Kafka-Nachrichten und Redis-Zugriff.
* **Konfiguration:** `github.com/go-git/gcfg/types/int.go` und `github.com/go-task/slim-sprig/defaults.go` bieten Konfigurations- und Standardwert-Funktionen.
* **Formatierung und Serialisierung:** `github.com/vmihailenco/msgpack/v5` ist eine MessagePack-Serialisierungsbibliothek.
* **Fehlerbehandlung:** Bibliotheken wie `github.com/go-git/go-git/v5/plumbing/format/packfile/error.go`, `github.com/invopop/validation/error.go` und `github.com/tus/tusd/v2/pkg/handler/error.go` bieten Fehlerbehandlungsmechanismen.
* **Performance-Profiler:** `github.com/google/pprof/profile/profile.go` ist Teil des Google pprof-Profilers.
* **Netzwerkprogrammierung:** `github.com/gobwas/glob` ist eine Bibliothek zur Mustererkennung, und `github.com/segmentio/kafka-go` ist ein Kafka-Client.
* **Sicherheit:** `github.com/libregraph/lico/oidc/payload/authentication.go` und `github.com/libregraph/oidc-go/well-known.go` sind Teile eines OIDC-Authentifizierungssystems.
* **Zeitsteuerung:** `github.com/jonboulle/clockwork/clockwork.go` ist eine Bibliothek zur Zeitsteuerung.
* **Zugriffskontrolle:** `github.com/open-policy-agent/opa` ist ein Open Policy Agent, ein System zur Richtlinienverwaltung und -durchsetzung.
* **Logging:** `github.com/go-micro.dev/v4/debug/log/options.go` bietet Logging-Funktionen.
* **Cache:** `github.com/pquerna/cachecontrol/cacheobject/directive.go` ist eine Bibliothek zur Cache-Steuerung.
Zusammengefasst: Dieser Codebase enthält eine Vielzahl von Go-Bibliotheken für verschiedene Anwendungsbereiche, darunter Validierung, Datenbankzugriff, HTTP-Operationen, Fehlerbehandlung, Sicherheit, Zeitsteuerung und Performance-Profiler.
> Tokens: 8.8k sent, 704 received.
#### those are the dependencies in the vendor folder. what about the actual code
Ich verstehe, Sie möchten wissen, was der eigentliche Codebase-Inhalt ist. Ich habe nur Zugriff auf die Vendor-Abhängigkeiten, nicht auf den tatsächlichen Anwendungscode Ihres Projekts. Um Änderungen an Ihrem Code vorzunehmen, benötige ich die Dateien, die tatsächlich bearbeitet werden sollen.
Wenn Sie möchten, dass ich Änderungen an bestimmten Dateien vornehme, müssen Sie diese Dateien zunächst zu unserem Gespräch hinzufügen. Sobald Sie das tun, kann ich Ihnen helfen, den Code entsprechend Ihren Anforderungen zu ändern.
Bitte fügen Sie die relevanten Dateien hinzu, damit ich Ihnen bei der Bearbeitung Ihres Codes helfen kann.
> Tokens: 9.8k sent, 168 received.
#### /context
> Aider v0.85.5
> Model: ollama/qwen3-coder:latest with context edit format
> Git repo: .git with 12,459 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 8192 tokens, always refresh
#### /settings
> Aider v0.85.5
Model: ollama/qwen3-coder:latest with context edit format
Git repo: .git with 12,459 files
Warning: For large repos, consider using --subtree-only and .aiderignore
See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
Repo-map: using 8192 tokens, always refresh
Command Line Args: --model ollama/qwen3-coder:latest
Defaults:
--set-env: []
--api-key: []
--model-settings-file:.aider.model.settings.yml
--model-metadata-file:.aider.model.metadata.json
--cache-keepalive-pings:0
--map-refresh: auto
--map-multiplier-no-files:2
--input-history-file:/home/jfd/Repositories/opencloud/.aider.input.history
--chat-history-file:/home/jfd/Repositories/opencloud/.aider.chat.history.md
--user-input-color:#00cc00
--tool-error-color:#FF2222
--tool-warning-color:#FFA500
--assistant-output-color:#0088ff
--code-theme: default
--aiderignore: /home/jfd/Repositories/opencloud/.aiderignore
--lint-cmd: []
--test-cmd: []
--voice-format: wav
--voice-language: en
--encoding: utf-8
--line-endings: platform
--env-file: /home/jfd/Repositories/opencloud/.env
Option settings:
- 35turbo: False
- 4: False
- 4_turbo: False
- 4o: False
- add_gitignore_files: False
- aiderignore: /home/jfd/Repositories/opencloud/.aiderignore
- alias: None
- analytics: None
- analytics_disable: False
- analytics_log: None
- analytics_posthog_host: None
- analytics_posthog_project_api_key: None
- anthropic_api_key: None
- api_key: []
- apply: None
- apply_clipboard_edits: False
- assistant_output_color: #0088ff
- attribute_author: None
- attribute_co_authored_by: True
- attribute_commit_message_author: False
- attribute_commit_message_committer: False
- attribute_committer: None
- auto_accept_architect: True
- auto_commits: True
- auto_lint: True
- auto_test: False
- cache_keepalive_pings: 0
- cache_prompts: False
- chat_history_file: /home/jfd/Repositories/opencloud/.aider.chat.history.md
- chat_language: None
- check_model_accepts_settings: True
- check_update: True
- code_theme: default
- commit: False
- commit_language: None
- commit_prompt: None
- completion_menu_bg_color: None
- completion_menu_color: None
- completion_menu_current_bg_color: None
- completion_menu_current_color: None
- config: None
- copy_paste: False
- dark_mode: False
- deepseek: False
- detect_urls: True
- dirty_commits: True
- disable_playwright: False
- dry_run: False
- edit_format: None
- editor: None
- editor_edit_format: None
- editor_model: None
- encoding: utf-8
- env_file: /home/jfd/Repositories/opencloud/.env
- exit: False
- fancy_input: True
- file: None
- files: []
- git: True
- git_commit_verify: False
- gitignore: True
- gui: False
- haiku: False
- input_history_file: /home/jfd/Repositories/opencloud/.aider.input.history
- install_main_branch: False
- just_check_update: False
- light_mode: False
- line_endings: platform
- lint: False
- lint_cmd: []
- list_models: None
- llm_history_file: None
- load: None
- map_multiplier_no_files: 2
- map_refresh: auto
- map_tokens: None
- max_chat_history_tokens: None
- message: None
- message_file: None
- mini: False
- model: ollama/qwen3-coder:latest
- model_metadata_file: .aider.model.metadata.json
- model_settings_file: .aider.model.settings.yml
- multiline: False
- notifications: False
- notifications_command: None
- o1_mini: False
- o1_preview: False
- openai_api_base: None
- openai_api_deployment_id: None
- openai_api_key: None
- openai_api_type: None
- openai_api_version: None
- openai_organization_id: None
- opus: False
- pretty: True
- read: None
- reasoning_effort: None
- restore_chat_history: False
- set_env: []
- shell_completions: None
- show_diffs: False
- show_model_warnings: True
- show_prompts: False
- show_release_notes: None
- show_repo_map: False
- skip_sanity_check_repo: False
- sonnet: False
- stream: True
- subtree_only: False
- suggest_shell_commands: True
- test: False
- test_cmd: []
- thinking_tokens: None
- timeout: None
- tool_error_color: #FF2222
- tool_output_color: None
- tool_warning_color: #FFA500
- upgrade: False
- user_input_color: #00cc00
- verbose: False
- verify_ssl: True
- vim: False
- voice_format: wav
- voice_input_device: None
- voice_language: en
- watch_files: False
- weak_model: None
- yes_always: None
Main model (ollama/qwen3-coder:latest):
input_cost_per_token: 0.0
key: qwen3-coder:latest
litellm_provider: ollama
max_input_tokens: 262144
max_output_tokens: 262144
max_tokens: 262144
mode: chat
output_cost_per_token: 0.0
supported_openai_params: ['max_tokens', 'stream', 'top_p', 'temperature', 'seed', 'frequency_penalty', 'stop', 'response_format', 'max_completion_tokens']
supports_function_calling: False
Editor model (ollama/qwen3-coder:latest):
input_cost_per_token: 0.0
key: qwen3-coder:latest
litellm_provider: ollama
max_input_tokens: 262144
max_output_tokens: 262144
max_tokens: 262144
mode: chat
output_cost_per_token: 0.0
supported_openai_params: ['max_tokens', 'stream', 'top_p', 'temperature', 'seed', 'frequency_penalty', 'stop', 'response_format', 'max_completion_tokens']
supports_function_calling: False
Weak model (ollama/qwen3-coder:latest):
input_cost_per_token: 0.0
key: qwen3-coder:latest
litellm_provider: ollama
max_input_tokens: 262144
max_output_tokens: 262144
max_tokens: 262144
mode: chat
output_cost_per_token: 0.0
supported_openai_params: ['max_tokens', 'stream', 'top_p', 'temperature', 'seed', 'frequency_penalty', 'stop', 'response_format', 'max_completion_tokens']
supports_function_calling: False
#### /settings
> Aider v0.85.5
Model: ollama/qwen3-coder:latest with context edit format
Git repo: .git with 12,459 files
Warning: For large repos, consider using --subtree-only and .aiderignore
See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
Repo-map: using 8192 tokens, always refresh
Command Line Args: --model ollama/qwen3-coder:latest
Defaults:
--set-env: []
--api-key: []
--model-settings-file:.aider.model.settings.yml
--model-metadata-file:.aider.model.metadata.json
--cache-keepalive-pings:0
--map-refresh: auto
--map-multiplier-no-files:2
--input-history-file:/home/jfd/Repositories/opencloud/.aider.input.history
--chat-history-file:/home/jfd/Repositories/opencloud/.aider.chat.history.md
--user-input-color:#00cc00
--tool-error-color:#FF2222
--tool-warning-color:#FFA500
--assistant-output-color:#0088ff
--code-theme: default
--aiderignore: /home/jfd/Repositories/opencloud/.aiderignore
--lint-cmd: []
--test-cmd: []
--voice-format: wav
--voice-language: en
--encoding: utf-8
--line-endings: platform
--env-file: /home/jfd/Repositories/opencloud/.env
Option settings:
- 35turbo: False
- 4: False
- 4_turbo: False
- 4o: False
- add_gitignore_files: False
- aiderignore: /home/jfd/Repositories/opencloud/.aiderignore
- alias: None
- analytics: None
- analytics_disable: False
- analytics_log: None
- analytics_posthog_host: None
- analytics_posthog_project_api_key: None
- anthropic_api_key: None
- api_key: []
- apply: None
- apply_clipboard_edits: False
- assistant_output_color: #0088ff
- attribute_author: None
- attribute_co_authored_by: True
- attribute_commit_message_author: False
- attribute_commit_message_committer: False
- attribute_committer: None
- auto_accept_architect: True
- auto_commits: True
- auto_lint: True
- auto_test: False
- cache_keepalive_pings: 0
- cache_prompts: False
- chat_history_file: /home/jfd/Repositories/opencloud/.aider.chat.history.md
- chat_language: None
- check_model_accepts_settings: True
- check_update: True
- code_theme: default
- commit: False
- commit_language: None
- commit_prompt: None
- completion_menu_bg_color: None
- completion_menu_color: None
- completion_menu_current_bg_color: None
- completion_menu_current_color: None
- config: None
- copy_paste: False
- dark_mode: False
- deepseek: False
- detect_urls: True
- dirty_commits: True
- disable_playwright: False
- dry_run: False
- edit_format: None
- editor: None
- editor_edit_format: None
- editor_model: None
- encoding: utf-8
- env_file: /home/jfd/Repositories/opencloud/.env
- exit: False
- fancy_input: True
- file: None
- files: []
- git: True
- git_commit_verify: False
- gitignore: True
- gui: False
- haiku: False
- input_history_file: /home/jfd/Repositories/opencloud/.aider.input.history
- install_main_branch: False
- just_check_update: False
- light_mode: False
- line_endings: platform
- lint: False
- lint_cmd: []
- list_models: None
- llm_history_file: None
- load: None
- map_multiplier_no_files: 2
- map_refresh: auto
- map_tokens: None
- max_chat_history_tokens: None
- message: None
- message_file: None
- mini: False
- model: ollama/qwen3-coder:latest
- model_metadata_file: .aider.model.metadata.json
- model_settings_file: .aider.model.settings.yml
- multiline: False
- notifications: False
- notifications_command: None
- o1_mini: False
- o1_preview: False
- openai_api_base: None
- openai_api_deployment_id: None
- openai_api_key: None
- openai_api_type: None
- openai_api_version: None
- openai_organization_id: None
- opus: False
- pretty: True
- read: None
- reasoning_effort: None
- restore_chat_history: False
- set_env: []
- shell_completions: None
- show_diffs: False
- show_model_warnings: True
- show_prompts: False
- show_release_notes: None
- show_repo_map: False
- skip_sanity_check_repo: False
- sonnet: False
- stream: True
- subtree_only: False
- suggest_shell_commands: True
- test: False
- test_cmd: []
- thinking_tokens: None
- timeout: None
- tool_error_color: #FF2222
- tool_output_color: None
- tool_warning_color: #FFA500
- upgrade: False
- user_input_color: #00cc00
- verbose: False
- verify_ssl: True
- vim: False
- voice_format: wav
- voice_input_device: None
- voice_language: en
- watch_files: False
- weak_model: None
- yes_always: None
Main model (ollama/qwen3-coder:latest):
input_cost_per_token: 0.0
key: qwen3-coder:latest
litellm_provider: ollama
max_input_tokens: 262144
max_output_tokens: 262144
max_tokens: 262144
mode: chat
output_cost_per_token: 0.0
supported_openai_params: ['max_tokens', 'stream', 'top_p', 'temperature', 'seed', 'frequency_penalty', 'stop', 'response_format', 'max_completion_tokens']
supports_function_calling: False
Editor model (ollama/qwen3-coder:latest):
input_cost_per_token: 0.0
key: qwen3-coder:latest
litellm_provider: ollama
max_input_tokens: 262144
max_output_tokens: 262144
max_tokens: 262144
mode: chat
output_cost_per_token: 0.0
supported_openai_params: ['max_tokens', 'stream', 'top_p', 'temperature', 'seed', 'frequency_penalty', 'stop', 'response_format', 'max_completion_tokens']
supports_function_calling: False
Weak model (ollama/qwen3-coder:latest):
input_cost_per_token: 0.0
key: qwen3-coder:latest
litellm_provider: ollama
max_input_tokens: 262144
max_output_tokens: 262144
max_tokens: 262144
mode: chat
output_cost_per_token: 0.0
supported_openai_params: ['max_tokens', 'stream', 'top_p', 'temperature', 'seed', 'frequency_penalty', 'stop', 'response_format', 'max_completion_tokens']
supports_function_calling: False
#### /ask
> Aider v0.85.5
> Model: ollama/qwen3-coder:latest with ask edit format
> Git repo: .git with 12,459 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 4096 tokens, auto refresh
#### how is this go repository structured`?
Es ist nicht möglich, die Struktur des Go-Repositorys zu bestimmen, da keine Informationen über die Hauptdateien oder Verzeichnisse des Projekts vorliegen. Die bereitgestellten Informationen beziehen sich ausschließlich auf Abhängigkeiten im `vendor`-Ordner.
Um die Struktur des Repositorys zu verstehen, benötige ich:
1. **Hauptverzeichnisse:** Wie sind die Hauptverzeichnisse des Projekts strukturiert? (z.B. `cmd/`, `pkg/`, `internal/`, `services/`)
2. **Hauptdateien:** Welche Go-Dateien enthalten den eigentlichen Anwendungscode?
3. **Go-Mod-Datei:** Die `go.mod`-Datei enthält wichtige Informationen über die Projektstruktur und Abhängigkeiten.
Ohne diese Informationen kann ich keine Aussage über die Struktur des Repositorys treffen. Bitte fügen Sie relevante Dateien hinzu, damit ich Ihnen bei der Analyse helfen kann.
> Tokens: 9.4k sent, 231 received.
# aider chat started at 2025-08-08 20:16:44
> /home/jfd/.local/bin/aider --model ollama/qwen3-coder:latest
> Aider v0.85.5
> Model: ollama/qwen3-coder:latest with whole edit format
> Git repo: .git with 2,175 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 4096 tokens, auto refresh
#### /ask what is this codebase about
#### what is this codebase about
Dieser Codebase beschreibt ein verteiltes System, wahrscheinlich eine Cloud-Plattform namens "opencloud", das auf Go (Golang) basiert. Es besteht aus vielen verschiedenen Diensten (Services), die jeweils für spezifische Funktionen zuständig sind, wie Authentifizierung, Benutzerverwaltung, Datei-Speicherung, Suchfunktionen, Ereignisverwaltung und vieles mehr.
Die Architektur verwendet:
* **Microservices:** Jeder Dienst ist ein eigenständiger Prozess (z.B. `auth-service`, `gateway`, `storage-users`).
* **gRPC und HTTP:** Für die Kommunikation zwischen den Diensten und mit externen Clients.
* **NATS.js (JetStream):** Als Messaging-System für Ereignisse und Kommunikation.
* **Protobuf (protobuf):** Für die Definition von Datenstrukturen und RPC-Schnittstellen (z.B. `eventhistory.pb.go`, `settings.pb.go`).
* **Konfiguration:** Über YAML-Dateien, Umgebungsvariablen und spezielle Konfigurations-Tools (`envdecode`).
* **Logging:** Mit `zerolog`.
* **Dependency Injection / Registry:** Für die Dienstregistrierung und -auflösung.
* **Tests:** Enthalten Unit-Tests und Akzeptanztests (z.B. in `tests/acceptance/`).
Zusammenfassend ist es ein komplexes, modular aufgebautes Cloud-System mit starkem Fokus auf Sicherheit, Skalierbarkeit und eine Vielzahl von Funktionen wie Benutzerverwaltung, Dateioperationen, Berechtigungen, Ereignisprotokollierung und mehr.
> Tokens: 7.6k sent, 402 received.
# aider chat started at 2025-08-13 12:18:21
> Newer aider version v0.86.0 is available.
> /home/jfd/.local/share/uv/tools/aider-chat/bin/python -m pip install --upgrade --upgrade-strategy only-if-needed aider-chat
> Run pip install? (Y)es/(N)o [Yes]: y
> Re-run aider to use new version.
# aider chat started at 2025-08-13 12:18:29
> /home/jfd/.local/bin/aider --model ollama/qwen3-coder:latest
> Aider v0.86.0
> Model: ollama/qwen3-coder:latest with whole edit format
> Git repo: .git with 2,175 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 4096 tokens, auto refresh
> https://aider.chat/HISTORY.html#release-notes
> Would you like to see what's new in this version? (Y)es/(N)o [Yes]: y
#### /ask
> Aider v0.86.0
> Model: ollama/qwen3-coder:latest with ask edit format
> Git repo: .git with 2,175 files
> Warning: For large repos, consider using --subtree-only and .aiderignore
> See: https://aider.chat/docs/faq.html#can-i-use-aider-in-a-large-mono-repo
> Repo-map: using 4096 tokens, auto refresh
#### how do I configure the forward timeout for trafik for an ingress in k3s
Um das Forward Timeout für einen Ingress in K3s mit Traefik zu konfigurieren, musst du die Traefik-Konfiguration anpassen.
1. **Erstellen oder Bearbeiten der Traefik-Konfiguration:**
* Erstelle eine Datei namens `traefik.yaml` im Verzeichnis `/var/lib/rancher/k3s/server/manifests/`.
* Füge folgenden Inhalt hinzu:
```yaml
apiVersion: v1
kind: Service
metadata:
name: traefik
namespace: kube-system
spec:
selector:
app.kubernetes.io/name: traefik
ports:
- port: 80
targetPort: 80
protocol: TCP
name: http
- port: 443
targetPort: 443
protocol: TCP
name: https
---
apiVersion: v1
kind: ConfigMap
metadata:
name: traefik-config
namespace: kube-system
data:
traefik.toml: |
[entryPoints]
[entryPoints.http]
address = ":80"
[entryPoints.http.forwardedHeaders]
trustedIPs = ["10.42.0.0/16"] # Anpassen, falls nötig
[entryPoints.https]
address = ":443"
[entryPoints.https.forwardedHeaders]
trustedIPs = ["10.42.0.0/16"] # Anpassen, falls nötig
[providers.kubernetesIngress]
# Konfiguration für den Kubernetes Ingress Provider
# (Standardmäßig aktiviert)
[api]
dashboard = true
# Aktiviere die API-Endpunkte
[log]
level = "INFO"
[metrics]
[metrics.prometheus]
entryPoint = "traefik"
# Aktiviere Metriken für Prometheus
# Konfiguration des Timeouts
[http]
[http.timeouts]
# Timeout für die Verbindung zum Backend (in Sekunden)
# Standardwert ist 30s
# Anpassen nach Bedarf
forwardTimeout = "60s" # Beispiel: 60 Sekunden
```
2. **Anwenden der Konfiguration:**
* Speichere die Datei `traefik.yaml`.
* K3s wird automatisch die Konfiguration anwenden.
3. **Verwendung in Ingress-Ressourcen:**
* Um das Timeout auf einer spezifischen Ingress-Ressource anzuwenden, kannst du einen Annotation verwenden:
```yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: example-ingress
annotations:
# Setze das Forward Timeout für diesen Ingress
traefik.ingress.kubernetes.io/forward-timeout: "60s"
spec:
rules:
- host: example.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: example-service
port:
number: 80
```
4. **Überprüfen der Konfiguration:**
* Überprüfe, ob die Traefik-Instanz korrekt konfiguriert wurde:
```bash
kubectl get pods -n kube-system | grep traefik
kubectl logs -n kube-system <traefik-pod-name>
```
5. **Neustart (falls erforderlich):**
* Falls du Änderungen an der Konfiguration vornimmst, kann es sein, dass du den Traefik-Pod neu starten musst:
```bash
kubectl delete pod -n kube-system <traefik-pod-name>
```
**Wichtige Hinweise:**
* Die `forwardTimeout`-Einstellung in der `traefik.toml` konfiguriert den Standardwert für alle Ingresses.
* Die Annotation `traefik.ingress.kubernetes.io/forward-timeout` überschreibt den Standardwert für einen spezifischen Ingress.
* Stelle sicher, dass die IP-Adressen in `trustedIPs` korrekt sind, um Sicherheitsprobleme zu vermeiden.
* Die Werte für `forwardTimeout` können in Sekunden (z.B. "60s"), Millisekunden (z.B. "500ms") oder Minuten (z.B. "1m") angegeben werden.
Diese Schritte helfen dir, das Forward Timeout für Traefik in K3s zu konfigurieren.
> Tokens: 7.8k sent, 1.0k received.

View File

@@ -1,36 +0,0 @@
# 2025-05-27 11:12:13.960332
+y
# 2025-05-27 11:12:24.831418
+N
# 2025-08-08 20:09:01.215861
+n
# 2025-08-08 20:10:02.002139
+/ask what is this codebase about
# 2025-08-08 20:12:31.750333
+those are the dependencies in the vendor folder. what about the actual code
# 2025-08-08 20:13:56.242508
+/context
# 2025-08-08 20:14:25.920747
+/settings
# 2025-08-08 20:14:54.465266
+/ask
# 2025-08-08 20:15:18.929199
+how is this go repository structured`?
# 2025-08-08 20:17:00.238863
+/ask what is this codebase about
# 2025-08-13 12:19:06.365022
+/ask
# 2025-08-13 12:19:50.163955
+how do I configure the forward timeout for trafik for an ingress in k3s

Some files were not shown because too many files have changed in this diff Show More