[Wekan] Bump version

pica-wekan/README.md

@@ -11,7 +11,9 @@ La configuration se fait essentiellement via le [docker-compose.yml](./docker-co
 
 ### Lancement
 
-Il suffit d'un `docker-compose up -d`.
+Au premier lancement, copier le fichier `.secrets.example` en `.secrets` et remplacer le mot de passe par celui du LDAP (disponible dans le [pass](https://gitlab.utc.fr/picasoft/interne/pass)).
+
+Il suffit ensuite d'un `docker-compose up -d`.
 
 ### Mise à jour
 

pica-wekan/docker-compose.yml

-version: '2.4'
+version: '3.7'
 
 volumes:
   wekan:
 
 networks:
   docker_default:
-    name: "docker_default"
+    external: true
   wekan:
     name: "wekan"
 
 services:
   wekan-db:
-    image: mongo:4.0.12
+    image: mongo:4.2
     container_name: wekan-db
-    restart: always
-    command: mongod --smallfiles --oplogSize 128
+    command: mongod --oplogSize 128
     expose:
       - 27017
     volumes:
       - wekan:/data/db
     networks:
       - wekan
+    restart: unless-stopped
 
   wekan-app:
-    image: wekanteam/wekan:v3.57
+    image: wekanteam/wekan:v4.25
     container_name: wekan-app
-    labels:
-      - "traefik.frontend.rule=Host:kanban.picasoft.net"
-      - "traefik.port=8080"
-      - "traefik.enable=true"
-    restart: always
-    links:
-      - wekan-db:wekan-db
     environment:
       - MONGO_URL=mongodb://wekan-db:27017/wekan
       - ROOT_URL=https://kanban.picasoft.net
+      # Don't send webhook on card click
       - CARD_OPENED_WEBHOOK_ENABLED=false
       - WEBHOOKS_ATTRIBUTES=cardId,listId,user
+      # ==== WEKAN API AND EXPORT BOARD ====
+      # Wekan Export Board works when WITH_API=true.
+      # https://github.com/wekan/wekan/wiki/REST-API
+      - WITH_API=true
+      # ==== PASSWORD BRUTE FORCE PROTECTION ====
+      - ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=10
+      - ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60
+      - ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15
+    env_file: ./secrets/wekan.secrets
     depends_on:
       - wekan-db
+    labels:
+      traefik.frontend.rule: Host:kanban.picasoft.net
+      traefik.port: 8080
+      traefik.enable: true
     networks:
       - docker_default
       - wekan
+    restart: unless-stopped

pica-wekan/secrets/wekan.secrets.example

+# NOTE: Special characters need to be url-encoded in MAIL_URL.
+# You can encode those characters for example at: https://www.urlencoder.org
+MAIL_URL=smtp://wekan:password@mail.picasoft.net:587/?ignoreTLS=true&tls={rejectUnauthorized:false}