From b743de48afa3085a8149e07b209829620745d12a Mon Sep 17 00:00:00 2001
From: Quentin Duchemin <quentinduchemin@tuta.io>
Date: Fri, 7 Aug 2020 15:54:51 +0200
Subject: [PATCH] [Wekan] Remove custom Dockerfile, add config and Compose
production files
---
pica-wekan/Dockerfile | 261 ----------------------------------
pica-wekan/README.md | 20 +++
pica-wekan/docker-compose.yml | 73 ++++------
3 files changed, 45 insertions(+), 309 deletions(-)
delete mode 100644 pica-wekan/Dockerfile
create mode 100644 pica-wekan/README.md
diff --git a/pica-wekan/Dockerfile b/pica-wekan/Dockerfile
deleted file mode 100644
index b0d69e34..00000000
--- a/pica-wekan/Dockerfile
+++ /dev/null
@@ -1,261 +0,0 @@
-FROM ubuntu:disco
-LABEL maintainer="wekan"
-
-# Set the environment variables (defaults where required)
-# DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303
-# ENV BUILD_DEPS="paxctl"
-ENV BUILD_DEPS="apt-utils bsdtar gnupg gosu wget curl bzip2 build-essential python3 python3-pip git ca-certificates gcc-8" \
- DEBUG=false \
- NODE_VERSION=v8.16.0 \
- METEOR_RELEASE=1.6.0.1 \
- USE_EDGE=false \
- METEOR_EDGE=1.5-beta.17 \
- NPM_VERSION=latest \
- FIBERS_VERSION=2.0.0 \
- ARCHITECTURE=linux-x64 \
- SRC_PATH=./ \
- WITH_API=true \
- ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \
- ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \
- ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \
- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3 \
- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \
- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \
- EMAIL_NOTIFICATION_TIMEOUT=30000 \
- MATOMO_ADDRESS="" \
- MATOMO_SITE_ID="" \
- MATOMO_DO_NOT_TRACK=true \
- MATOMO_WITH_USERNAME=false \
- BROWSER_POLICY_ENABLED=true \
- TRUSTED_URL="" \
- WEBHOOKS_ATTRIBUTES="" \
- OAUTH2_ENABLED=false \
- OAUTH2_LOGIN_STYLE=redirect \
- OAUTH2_CLIENT_ID="" \
- OAUTH2_SECRET="" \
- OAUTH2_SERVER_URL="" \
- OAUTH2_AUTH_ENDPOINT="" \
- OAUTH2_USERINFO_ENDPOINT="" \
- OAUTH2_TOKEN_ENDPOINT="" \
- OAUTH2_ID_MAP="" \
- OAUTH2_USERNAME_MAP="" \
- OAUTH2_FULLNAME_MAP="" \
- OAUTH2_ID_TOKEN_WHITELIST_FIELDS=[] \
- OAUTH2_REQUEST_PERMISSIONS=['openid','profiles','email'] \
- OAUTH2_EMAIL_MAP="" \
- LDAP_ENABLE=false \
- LDAP_PORT=389 \
- LDAP_HOST="" \
- LDAP_BASEDN="" \
- LDAP_LOGIN_FALLBACK=false \
- LDAP_RECONNECT=true \
- LDAP_TIMEOUT=10000 \
- LDAP_IDLE_TIMEOUT=10000 \
- LDAP_CONNECT_TIMEOUT=10000 \
- LDAP_AUTHENTIFICATION=false \
- LDAP_AUTHENTIFICATION_USERDN="" \
- LDAP_AUTHENTIFICATION_PASSWORD="" \
- LDAP_LOG_ENABLED=false \
- LDAP_BACKGROUND_SYNC=false \
- LDAP_BACKGROUND_SYNC_INTERVAL=100 \
- LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false \
- LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false \
- LDAP_ENCRYPTION=false \
- LDAP_CA_CERT="" \
- LDAP_REJECT_UNAUTHORIZED=false \
- LDAP_USER_AUTHENTICATION=false \
- LDAP_USER_SEARCH_FILTER="" \
- LDAP_USER_SEARCH_SCOPE="" \
- LDAP_USER_SEARCH_FIELD="" \
- LDAP_SEARCH_PAGE_SIZE=0 \
- LDAP_SEARCH_SIZE_LIMIT=0 \
- LDAP_GROUP_FILTER_ENABLE=false \
- LDAP_GROUP_FILTER_OBJECTCLASS="" \
- LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE="" \
- LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE="" \
- LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT="" \
- LDAP_GROUP_FILTER_GROUP_NAME="" \
- LDAP_UNIQUE_IDENTIFIER_FIELD="" \
- LDAP_UTF8_NAMES_SLUGIFY=true \
- LDAP_USERNAME_FIELD="" \
- LDAP_FULLNAME_FIELD="" \
- LDAP_MERGE_EXISTING_USERS=false \
- LDAP_EMAIL_FIELD="" \
- LDAP_EMAIL_MATCH_ENABLE=false \
- LDAP_EMAIL_MATCH_REQUIRE=false \
- LDAP_EMAIL_MATCH_VERIFIED=false \
- LDAP_SYNC_USER_DATA=false \
- LDAP_SYNC_USER_DATA_FIELDMAP="" \
- LDAP_SYNC_GROUP_ROLES="" \
- LDAP_DEFAULT_DOMAIN="" \
- LDAP_SYNC_ADMIN_STATUS="" \
- LDAP_SYNC_ADMIN_GROUPS="" \
- HEADER_LOGIN_ID="" \
- HEADER_LOGIN_FIRSTNAME="" \
- HEADER_LOGIN_LASTNAME="" \
- HEADER_LOGIN_EMAIL="" \
- LOGOUT_WITH_TIMER=false \
- LOGOUT_IN="" \
- LOGOUT_ON_HOURS="" \
- LOGOUT_ON_MINUTES="" \
- CORS="" \
- DEFAULT_AUTHENTICATION_METHOD=""
-
-RUN set -o xtrace && \
- apt-get update -y && apt-get install -y --no-install-recommends ${BUILD_DEPS} && \
- pip3 install -U pip setuptools wheel
-
-RUN git clone https://github.com/wekan/wekan && cd wekan && git checkout v2.75 && cd .. && mkdir /home/wekan && cp -r ./wekan /home/wekan/app && \
- useradd --user-group --system --home-dir /home/wekan wekan
-
- # Meteor installer doesn't work with the default tar binary, so using bsdtar while installing.
- # https://github.com/coreos/bugs/issues/1095#issuecomment-350574389
-RUN cp $(which tar) $(which tar)~ && \
- ln -sf $(which bsdtar) $(which tar) && \
- \
- # Download nodejs
- wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
- wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
- #---------------------------------------------------------------------------------------------
- # Node Fibers 100% CPU usage issue:
- # https://github.com/wekan/wekan-mongodb/issues/2#issuecomment-381453161
- # https://github.com/meteor/meteor/issues/9796#issuecomment-381676326
- # https://github.com/sandstorm-io/sandstorm/blob/0f1fec013fe7208ed0fd97eb88b31b77e3c61f42/shell/server/00-startup.js#L99-L129
- # Also see beginning of wekan/server/authentication.js
- # import Fiber from "fibers";
- # Fiber.poolSize = 1e9;
- # OLD: Download node version 8.12.0 prerelease that has fix included, => Official 8.12.0 has been released
- # Description at https://releases.wekan.team/node.txt
- #wget https://releases.wekan.team/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
- #echo "1ed54adb8497ad8967075a0b5d03dd5d0a502be43d4a4d84e5af489c613d7795 node-v8.12.0-linux-x64.tar.gz" >> SHASUMS256.txt.asc && \
- \
- # Verify nodejs authenticity
- grep ${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | shasum -a 256 -c - && \
- #export GNUPGHOME="$(mktemp -d)" && \
- #\
- # Try other key servers if ha.pool.sks-keyservers.net is unreachable
- # Code from https://github.com/chorrell/docker-node/commit/2b673e17547c34f17f24553db02beefbac98d23c
- # gpg keys listed at https://github.com/nodejs/node#release-team
- # and keys listed here from previous version of this Dockerfile
- #for key in \
- #9554F04D7259F04124DE6B476D5A82AC7E37093B \
- #94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
- #FD3A5288F042B6850C66B31F09FE44734EB7990E \
- #71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
- #DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
- #C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
- #B9AE9905FFD7803F25714661B63B535A4C206CA9 \
- #; do \
- #gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" || \
- #gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
- #gpg --keyserver keyserver.pgp.com --recv-keys "$key" ; \
- #done && \
- #gpg --verify SHASUMS256.txt.asc && \
- # Ignore socket files then delete files then delete directories
- #find "$GNUPGHOME" -type f | xargs rm -f && \
- #find "$GNUPGHOME" -type d | xargs rm -fR && \
- rm -f SHASUMS256.txt.asc && \
- \
- # Install Node
- tar xvzf node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
- rm node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
- mv node-${NODE_VERSION}-${ARCHITECTURE} /opt/nodejs && \
- ln -s /opt/nodejs/bin/node /usr/bin/node && \
- ln -s /opt/nodejs/bin/npm /usr/bin/npm && \
- \
- #DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303
- #paxctl -mC `which node` && \
- \
- # Install Node dependencies
- npm install -g npm@${NPM_VERSION} && \
- npm install -g node-gyp && \
- npm install -g fibers@${FIBERS_VERSION} && \
- \
- # Change user to wekan and install meteor
- cd /home/wekan/ && \
- chown wekan:wekan --recursive /home/wekan && \
- curl "https://install.meteor.com" -o /home/wekan/install_meteor.sh && \
- #curl "https://install.meteor.com/?release=${METEOR_RELEASE}" -o /home/wekan/install_meteor.sh && \
- # OLD: sed -i "s|RELEASE=.*|RELEASE=${METEOR_RELEASE}\"\"|g" ./install_meteor.sh && \
- # Install Meteor forcing its progress
- sed -i 's/VERBOSITY="--silent"/VERBOSITY="--progress-bar"/' ./install_meteor.sh && \
- echo "Starting meteor ${METEOR_RELEASE} installation... \n" && \
- chown wekan:wekan /home/wekan/install_meteor.sh && \
- \
- # Check if opting for a release candidate instead of major release
- if [ "$USE_EDGE" = false ]; then \
- gosu wekan:wekan sh /home/wekan/install_meteor.sh; \
- else \
- gosu wekan:wekan git clone --recursive --depth 1 -b release/METEOR@${METEOR_EDGE} git://github.com/meteor/meteor.git /home/wekan/.meteor; \
- fi; \
- \
- # Get additional packages
- #mkdir -p /home/wekan/app/packages && \
- #chown wekan:wekan --recursive /home/wekan && \
- # REPOS BELOW ARE INCLUDED TO WEKAN REPO
- #cd /home/wekan/app/packages && \
- #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/flow-router.git kadira-flow-router && \
- #gosu wekan:wekan git clone --depth 1 -b master https://github.com/meteor-useraccounts/core.git meteor-useraccounts-core && \
- #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/meteor-accounts-cas.git && \
- #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/wekan-ldap.git && \
- #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/wekan-scrollbar.git && \
- #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/meteor-accounts-oidc.git && \
- #gosu wekan:wekan git clone --depth 1 -b master --recurse-submodules https://github.com/wekan/markdown.git && \
- #gosu wekan:wekan mv meteor-accounts-oidc/packages/switch_accounts-oidc wekan-accounts-oidc && \
- #gosu wekan:wekan mv meteor-accounts-oidc/packages/switch_oidc wekan-oidc && \
- #gosu wekan:wekan rm -rf meteor-accounts-oidc && \
- sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js && \
- cd /home/wekan/.meteor && \
- gosu wekan:wekan /home/wekan/.meteor/meteor -- help; \
- \
- # extract the OpenAPI specification
- npm install -g api2html@0.3.3 && \
- mkdir -p /home/wekan/python && \
- chown wekan:wekan --recursive /home/wekan/python && \
- cd /home/wekan/python && \
- gosu wekan:wekan git clone --depth 1 -b master https://github.com/Kronuz/esprima-python && \
- cd /home/wekan/python/esprima-python && \
- python3 setup.py install --record files.txt && \
- cd /home/wekan/app &&\
- gosu wekan:wekan mkdir -p ./public/api && \
- gosu wekan:wekan python3 ./openapi/generate_openapi.py --release $(git describe --tags --abbrev=0) > ./public/api/wekan.yml && \
- gosu wekan:wekan /opt/nodejs/bin/api2html -c ./public/logo-header.png -o ./public/api/wekan.html ./public/api/wekan.yml; \
- # Build app
- cd /home/wekan/app && \
- gosu wekan:wekan /home/wekan/.meteor/meteor add standard-minifier-js && \
- gosu wekan:wekan /home/wekan/.meteor/meteor npm install && \
- gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build && \
- cp /home/wekan/app/fix-download-unicode/cfs_access-point.txt /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \
- rm /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/rajit_bootstrap3-datepicker/lib/bootstrap-datepicker/node_modules/phantomjs-prebuilt/lib/phantom/bin/phantomjs && \
- chown wekan:wekan /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \
- #Removed binary version of bcrypt because of security vulnerability that is not fixed yet.
- #https://github.com/wekan/wekan/commit/4b2010213907c61b0e0482ab55abb06f6a668eac
- #https://github.com/wekan/wekan/commit/7eeabf14be3c63fae2226e561ef8a0c1390c8d3c
- #cd /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/npm-bcrypt && \
- #gosu wekan:wekan rm -rf node_modules/bcrypt && \
- #gosu wekan:wekan npm install bcrypt && \
- cd /home/wekan/app_build/bundle/programs/server/ && \
- gosu wekan:wekan npm install && \
- #gosu wekan:wekan npm install bcrypt && \
- mv /home/wekan/app_build/bundle /build && \
- \
- # Put back the original tar
- mv $(which tar)~ $(which tar) && \
- \
- # Cleanup
- apt-get remove --purge -y ${BUILD_DEPS} && \
- apt-get autoremove -y && \
- npm uninstall -g api2html &&\
- rm -R /var/lib/apt/lists/* && \
- rm -R /home/wekan/.meteor && \
- rm -R /home/wekan/app && \
- rm -R /home/wekan/app_build && \
- cat /home/wekan/python/esprima-python/files.txt | xargs rm -R && \
- rm -R /home/wekan/python && \
- rm /home/wekan/install_meteor.sh
-
-ENV PORT=8080
-EXPOSE $PORT
-USER wekan
-
-CMD ["node", "/build/main.js"]
diff --git a/pica-wekan/README.md b/pica-wekan/README.md
new file mode 100644
index 00000000..5d204200
--- /dev/null
+++ b/pica-wekan/README.md
@@ -0,0 +1,20 @@
+## Wekan
+
+Ce dossier contient les ressources nécessaires pour lancer une instance Wekan sur les serveurs de Picasoft.
+Il se base sur des images pré-construites et ne nécessite donc pas de construction manuelle.
+
+L'instance comporte une base de données MongoDB et un serveur applicatif.
+
+### Configuration
+
+La configuration se fait essentiellement via le [docker-compose.yml](./docker-compose.yml), au niveau des variables d'environnement.
+
+### Lancement
+
+Il suffit d'un `docker-compose up -d`.
+
+### Mise à jour
+
+Il suffit de mettre à jour les tags des images dans le [docker-compose.yml](./docker-compose.yml), et de vérifier au niveau de la page des [Releases](https://github.com/wekan/wekan/releases) s'il y a eu des modifications.
+
+On pourra aussi consulter le Compose du dépôt officiel pour effectuer les nouvelles configurations.
diff --git a/pica-wekan/docker-compose.yml b/pica-wekan/docker-compose.yml
index 9665c0e3..22ca460a 100644
--- a/pica-wekan/docker-compose.yml
+++ b/pica-wekan/docker-compose.yml
@@ -1,67 +1,44 @@
version: '2.4'
+volumes:
+ wekan:
+
networks:
docker_default:
- external: true
name: "docker_default"
-
-
+ wekan:
+ name: "wekan"
services:
+ wekan-db:
+ image: mongo:4.0.12
+ container_name: wekan-db
+ restart: always
+ command: mongod --smallfiles --oplogSize 128
+ expose:
+ - 27017
+ volumes:
+ - wekan:/data/db
+ networks:
+ - wekan
wekan-app:
- image: registry.picasoft.net/pica-wekan:2.75
- build: .
+ image: wekanteam/wekan:v3.57
container_name: wekan-app
- restart: always
- links:
- - wekan-db:wekan-db
- networks:
- - docker_default
labels:
- - "traefik.frontend.rule=Host:wekan2.test.picasoft.net"
+ - "traefik.frontend.rule=Host:kanban.picasoft.net"
- "traefik.port=8080"
- "traefik.enable=true"
+ restart: always
+ links:
+ - wekan-db:wekan-db
environment:
- MONGO_URL=mongodb://wekan-db:27017/wekan
- - ROOT_URL=http://wekan2.test.picasoft.net # <=== using only at same laptop/desktop where Wekan is installed
- - WITH_API=true
- #---------------------------------------------------------------
- #
- # LOGOUT_ON_MINUTES : The number of minutes
- # example : LOGOUT_ON_MINUTES=55
- #- LOGOUT_ON_MINUTES=
- #-------------------------------------------------------------------
- security_opt:
- - no-new-privileges
- mem_limit: "4096m"
- cpus: "0.60"
- pids_limit: 1024
+ - ROOT_URL=https://kanban.picasoft.net
+ - CARD_OPENED_WEBHOOK_ENABLED=false
+ - WEBHOOKS_ATTRIBUTES=cardId,listId,user
depends_on:
- wekan-db
-
- wekan-db:
- image: mongo:3.2.21
- #-------------------------------------------------------------------------------------
- container_name: wekan-db
- restart: always
- command: mongod --smallfiles --oplogSize 128
networks:
- docker_default
- expose:
- - 27017
- #volumes:
- #- wekan-db:/data/db
- #- wekan-db-dump:/dump
- #volumes:
- #- /DATA/docker/wekan-db:/data/db
- security_opt:
- - no-new-privileges
- mem_limit: "2048m"
- cpus: "0.20"
- pids_limit: 1024
-volumes:
- wekan-db:
- driver: local
- wekan-db-dump:
- driver: local
+ - wekan
--
GitLab