Commit Graph

14 Commits

Author SHA1 Message Date
Pascal Bleser
1b9249ecba upgrade Stalwart to 0.13.2 2025-12-09 09:15:36 +01:00
Pascal Bleser
07522ce79a Refactor groupware service after ADR decision on the Groupware API
* after having decided that the Groupware API should be a standalone
   independent custom REST API that is using JMAP data models as much as
   possible,
 * removed Groupware APIs from the Graph service
 * moved Groupware implementation to the Groupware service, and
   refactored a few things accordingly
2025-12-09 09:15:36 +01:00
Pascal Bleser
2412e64cc5 opencloud_full: upgrade Stalwart to 0.12.5, and use the ghcr.io container repository to avoid Hub limits 2025-12-09 09:15:36 +01:00
Pascal Bleser
5920291ec7 fix Stalwart LDAP configuration 2025-12-09 09:15:36 +01:00
Pascal Bleser
772a902f6d Use password policy overlay in LDAP and configure Stalwart to use it 2025-12-09 09:15:36 +01:00
Pascal Bleser
e0ea733489 upgrade Stalwart to 0.12.4 2025-12-09 09:15:36 +01:00
Pascal Bleser
a6cdb4e863 upgrade Stalwart to 0.12 2025-12-09 09:15:36 +01:00
Pascal Bleser
02f33bd1d8 minor corrections to the Stalwart configuration 2025-12-09 09:15:36 +01:00
Pascal Bleser
ebd58fcfdb Introduce a the auth-api service
* primitive implementation to demonstrate how it could work, still to
   be considered WIP at best

 * add new dependency: MicahParks/jwkset and MicahParks/keyfunc to
   retrieve the JWK set from KeyCloak to verify the signature of the
   JWTs sent as part of Bearer authentication in the /auth API

 * (minor) opencloud/.../service.go: clean up a logging statement that
   was introduced earlier to hunt down why the auth-api service was not
   being started
2025-12-09 09:15:36 +01:00
Pascal Bleser
6da208e754 add an OIDC Directory to Stalwart, requires exposing Keycloak port 8080 directly to access the userinfo endpoint using HTTP since the certificates in traefik are self-signed and end up being rejected by Stalwart with no option to bypass the certificate check 2025-12-09 09:15:36 +01:00
Pascal Bleser
6620313b43 rename Stalwart fallback admin username from 'admin' to 'mailadmin' since 'admin' exists as a regular user in LDAP and thus won't have access to the administration 2025-12-09 09:15:36 +01:00
Pascal Bleser
0435d5679d Add Stalwart container to the opencloud_full deployment, using the OpenLDAP container as a directory for user authentication 2025-12-09 09:15:36 +01:00
Thomas Schweiger
2c18d5b010 fix: apply changes from other fixes in compose repo (#1707)
* fix: apply changes from other fixes in compose repo

* temporarily disabled e2e navigation step

---------

Co-authored-by: Viktor Scharf <v.scharf@opencloud.eu>
2025-10-24 22:10:27 +02:00
Ralf Haferkamp
5023642885 cleanup: Move old compose example to devtools directory
We agreed to move the 'opencloud_full' example to a new directory to
avoid confusion with the supported compose examples in
opencloud-compose.

This commit keeps the bare-metal example in place as that is still
mentioned in the documentation.
2025-09-24 08:33:03 +02:00