add sso configuration instructions

Reviewed-on: #8

README.md

@@ -27,5 +27,38 @@
 * For environments with 2GB or less RAM, run `abra app config <app-name>` and uncomment the `For low-resource machines` config block
 * More info: https://hub.docker.com/r/baserow/baserow/#scaling-options
 
+## Enable SSO with Authenitk
+This is how to configure your Baserow server to accept logins from your Authenitk SSO provider. You need at least an advanced Baserow plan to use this feature. 
+
+### Configure Authenitk
+**Create Application and Provider**
+
+* Log in as administrator of your Authentik instance
+* Go to https://your-authentik-domain/if/admin/#/core/applications and choose *Create with Provider*
+* Follow these steps to configure the provider, if a field isn't specified here, you can keep the default value
+    * Application Name: baserow -> **Next**
+    * Choose OAuth2/OIDC -> **Next**
+    * Set Authorization flow: `default-provider-authorization-implicit-consent (Authorize Application)`
+    * Copy the **Client ID** and **Client Secret**, you'll need them later
+    * Add Redirect URI: Strict - https://your-baserow-domain/api/sso/oauth2/callback/2/ -> **Next**
+        * **Note**: You may need to change this URI based your baserow settings later
+    * **Next** and **Submit**
+
+### Configure Baserow
+**Create Baserow SSO Provider**
+
+* Log in as adminsitrator of your Baserow instance
+* Go to https://your-baserow-domain/admin/auth-providers and choose *Add Provider*
+    * Name: `authentik`
+    * URL: `https://<your-authentik-domain>/application/o/baserow`
+    * Fill out Client ID and Secret with the copied values from the Authentik provisioning
+* At this point, check the `Callback URL` at the bottom of the page, it should be the same as the Redirect URI earlier
+    * If it's not go back to Authentik and under https://your-authentik-domain/if/admin/#/core/providers edit the Baserow provider to use the Callback URL provided by Baserow
+
+**Disable non-SSO login (Optional)**
+
+* Still under the `Authentication Providers` page, uncheck the email and password authentication option
+* You can still login to your admin instance at https://your-baserow-domain/login?noredirect
+
 For more, see [`docs.coopcloud.tech`](https://docs.coopcloud.tech).
 

abra.sh

@@ -0,0 +1 @@
+export PG_BACKUP_CONFIG_VERSION=v1

backup-postgres.sh

@@ -0,0 +1,22 @@
+if [ "$1" == "pre-backup" ]; then
+  # Remove any existing db dump and then create a new one
+  rm -rf $DATA_DIR/postgres/postgres-backup
+  source /baserow/data/.pgpass
+  PGPASSWORD=$DATABASE_PASSWORD pg_dump -j 8 -h localhost -U baserow baserow --format=directory -f $DATA_DIR/postgres/postgres-backup
+  exit
+fi
+
+if [ "$1" == "post-backup" ]; then
+  rm -rf $DATA_DIR/postgres/postgres-backup
+  exit
+fi
+
+if [ "$1" == "pre-restore" ]; then
+  exit
+fi
+
+if [ "$1" == "post-restore" ]; then
+  source /baserow/data/.pgpass
+  PGPASSWORD=$DATABASE_PASSWORD pg_restore -j 8 -h localhost -U baserow -d baserow -c $DATA_DIR/postgres/postgres-backup
+  exit
+fi

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: baserow/baserow:1.31.1
+    image: baserow/baserow:2.0.5
     networks:
       - proxy
     environment:
@@ -28,20 +28,33 @@ services:
         #- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=1.0.0+1.31.1"
+        - "backupbot.backup=true"
+        - "backupbot.backup.path=/baserow/data"
+        - "backupbot.backup.pre-hook=/backup.sh pre-backup"
+        - "backupbot.backup.post-hook=/backup.sh post-backup"
+        - "backupbot.restore.post-hook=/backup.sh post-restore"
+        - "coop-cloud.${STACK_NAME}.version=2.0.0+2.0.5"
     healthcheck:
       test: ["CMD", "./baserow.sh", "backend-cmd", "backend-healthcheck"]
       interval: 30s
       timeout: 10s
       retries: 10
       start_period: 1m
-
     volumes:
       - baserow_data:/baserow/data
+    configs:
+      - source: backup-postgres
+        target: /backup.sh
+        mode: 0777      
       
 volumes:
   baserow_data:
 
+configs:
+  backup-postgres:
+    name: backup-postgres_${PG_BACKUP_CONFIG_VERSION}
+    file: ./backup-postgres.sh
+
 networks:
   proxy:
     external: true

release/1.3.0+1.35.3

@@ -0,0 +1 @@
+Backup/restore of the postgres database backend will now use pg_dump and pg_restore

release/2.0.0+2.0.5

@@ -0,0 +1,3 @@
+= 1 Breaking Change = 
+
+[Builder] Data source now return content with human property names instead of technical ones #4135