doc: add "whiteboard" instructions to README

Had a hiccup installing whiteboard today. Expected it to "just work",
 but there are a few manual steps I needed to do. I wrote those out in
 the README, since we don't have more structured nextcloud docs yet.

README.md

@@ -399,6 +399,42 @@ docker exec -u www-data $(docker ps -f name=foo_com_app -q) ./occ preview:pre-ge
 
 This app will improve performance of image browsing at the cost of storage space.
 
+## Using [`whiteboard`](https://github.com/nextcloud/whiteboard) app
+
+1. Uncomment the following lines in your env file:
+```
+# COMPOSE_FILE="$COMPOSE_FILE:compose.whiteboard.yml"
+# APPS="$APPS whiteboard"
+# SECRET_WHITEBOARD_JWT_VERSION=v1
+```
+
+2. Generate the secret for whiteboard
+```bash
+abra app secret generate <domain> whiteboard_jwt v1
+```
+make note of this secret for a future step.
+
+3. Deploy your app
+```bash
+abra app deploy -f <domain>
+```
+
+Note: Depending on your deployment, you may need to manually install the Whiteboard app.
+From an admin account, visit
+```
+https://<your domain>/settings/apps/search?q=whiteboard
+```
+and install the "Whiteboard" app.
+
+4. From an admin account, visit the Whiteboard Administration Settings:
+```
+https://<your domain>/settings/admin/whiteboard
+```
+And fill in:
+
+- Websocket URL: `https://<your domain>/whiteboard`
+- Shared Secret: the `whiteboard_jwt` secret you generated earlier
+
 ## Fulltextsearch using elasticsearch
 
 1. Uncomment the following lines in your env file:

abra.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-export FPM_TUNE_VERSION=v6
+export FPM_TUNE_VERSION=v5
 export NGINX_CONF_VERSION=v9
 export MY_CNF_VERSION=v6
 export ENTRYPOINT_VERSION=v3

compose.fulltextsearch.yml

@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   elasticsearch:
-    image: "docker.elastic.co/elasticsearch/elasticsearch:8.19.23"
+    image: "docker.elastic.co/elasticsearch/elasticsearch:8.19.24"
     environment:
       - cluster.name=docker-cluster
       - bootstrap.memory_lock=true

compose.whiteboard.yml

@@ -6,7 +6,7 @@ services:
       - whiteboard_jwt
 
   whiteboard:
-    image: ghcr.io/nextcloud-releases/whiteboard:v2.0.0
+    image: ghcr.io/nextcloud-releases/whiteboard:v2.1.2
     deploy:
       labels:
         - traefik.enable=true
@@ -24,8 +24,6 @@ services:
     user: root
     networks:
      - proxy
-    ports:
-      - 3002:3002
     secrets:
       - whiteboard_jwt
     environment:

compose.yml

@@ -1,7 +1,7 @@
 version: "3.8"
 services:
   web:
-    image: nginx:1.31.7
+    image: nginx:1.31.8
     depends_on:
       - app
     configs:
@@ -95,7 +95,7 @@ services:
         failure_action: rollback
         order: start-first
       labels:
-        - "coop-cloud.${STACK_NAME}.version=15.0.0+34.0.5-fpm"
+        - "coop-cloud.${STACK_NAME}.version=15.1.0+34.0.5-fpm"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
         - "backupbot.backup=${ENABLE_BACKUPS:-true}"
         - "backupbot.backup.volumes.redis=false"
@@ -125,7 +125,7 @@ services:
 
 
   cache:
-    image: redis:8.10.2-alpine
+    image: redis:8.10.3-alpine
     networks:
       - internal
     volumes:

fpm-tune.ini

@@ -1,14 +1,5 @@
-[www]
 pm = dynamic
 pm.max_children = {{ env "FPM_MAX_CHILDREN" }}
 pm.start_servers = {{ env "FPM_START_SERVERS" }}
 pm.min_spare_servers = {{ env "FPM_MIN_SPARE_SERVERS" }}
 pm.max_spare_servers = {{ env "FPM_MAX_SPARE_SERVERS" }}
-
-; Mitigations for CVE-2026-109618 / CVE-2026-109619 until the image ships
-; PHP >= 8.5.12, see https://www.php.net/archive/2026.php#2026-10-21-5
-php_admin_value[memory_limit] = -1
-php_admin_value[post_max_size] = 32M
-php_admin_value[upload_max_filesize] = 30M
-php_admin_value[session.upload_progress.enabled] = 0
-php_admin_value[fatal_error_backtraces] = 0

release/15.0.1+34.0.5-fpm

@@ -0,0 +1,2 @@
+This release is to have a "logical" update to make sure
+you know the php bug has been fixed.

release/next

@@ -1,4 +0,0 @@
-Security: mitigates PHP RCE CVE-2026-109618 / CVE-2026-109619 (https://www.php.net/archive/2026.php#2026-10-21-5)
-via the FPM pool config: memory_limit=-1, post_max_size=32M, upload_max_filesize=30M,
-session.upload_progress.enabled=0, fatal_error_backtraces=0. PHP_MEMORY_LIMIT and PHP_UPLOAD_LIMIT
-are overridden for web requests until the nextcloud image ships PHP >= 8.5.12.