adds maintenance.md and updates readme to maintainers

https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132

.drone.yml

@@ -18,7 +18,7 @@ steps:
       STACK_NAME: wekan
       LETS_ENCRYPT_ENV: production
       SECRET_OAUTH2_SECRET_VERSION: v1
-      ENTRYPOINT_VERSION: v1
+      ENTRYPOINT_VERSION: v2
       SECRET_OAUTH2_SECRET_VERSION: v1
 trigger:
   branch:
@@ -35,7 +35,7 @@ steps:
         from_secret: drone_abra-bot_token
       fork: true
       repositories:
-        - coop-cloud/auto-recipes-catalogue-json
+        - toolshed/auto-recipes-catalogue-json
 
 trigger:
   event: tag

.env.sample

@@ -1,6 +1,7 @@
 TYPE=wekan
-TIMEOUT=300
+#TIMEOUT=
 ENABLE_AUTO_UPDATE=true
+ENABLE_BACKUPS=true
 LETS_ENCRYPT_ENV=production
 SECRET_OAUTH2_SECRET_VERSION=v1
 
@@ -26,6 +27,9 @@ RICHER_CARD_COMMENT_EDITOR=false
 
 # PASSWORD_LOGIN_ENABLED=false
 
+# LOGO_IMG_URL=https://authentik.example.com/static/dist/assets/icons/icon_left_brand.svg
+# LOGO_LINK_URL=https://authentik.example.com
+
 ### OAUTH2 ###
 
 OAUTH2_ENABLED=false

MAINTENANCE.md

@@ -0,0 +1,32 @@
+# wekan Recipe Maintenance
+
+All contributions should be made via a pull request. This is to ensure a
+certain quality and consistency, that others can rely on.
+
+## Maintainer Responsibilities
+
+A recipe maintainer has the following responsibilities:
+
+- Respond to pull requests / issues within two weeks
+- Make image security updates within a week
+- Make image major updates every three months
+
+In order to fullfill these responsibilities a recipe maintainer:
+
+- Has to watch the repository (to get notifications)
+- Needs to make sure renovate is configured properly
+
+## Pull Requests
+
+A pull request can be merged if it is approved by at least one maintainer. For
+pull requests opened by a maintainer they need to be approved by another
+maintainer. Even though it is okay to merge a pull request with one approval, it
+is always better if all maintainers looked at the pull request and approved it.
+
+## Become a maintainer
+
+Everyone can apply to be a recipe maintainer:
+1. Watch the repository to always get updates
+2. Simply add your self to the list in the [README.md](./README.md) and open a new pull request with the change.
+3. Once the pull request gets merged you will be added to the [wekan maintainers team](https://git.coopcloud.tech/org/coop-cloud/teams/wekan-maintainers).
+4. Join the room [#cc-|-wekan-maintenance:matrix.org](#cc-|-wekan-maintenance:matrix.org) and chat to other maintainers.

README.md

@@ -4,6 +4,7 @@ The Open Source kanban (built with Meteor)
 [Github](https://github.com/wekan/wekan)
 
 <!-- metadata -->
+* **Maintainer**: Local-IT: [@moritz](https://git.coopcloud.tech/moritz), [@msimon](https://git.coopcloud.tech/simon), [@carla](https://git.coopcloud.tech/carla)
 * **Category**: Apps
 * **Status**: ?
 * **Image**: [`quay.io/wekan/wekan`](https://quay.io/repository/wekan/wekan)

abra.sh

@@ -1 +1,25 @@
-export ENTRYPOINT_VERSION=v2
+export ENTRYPOINT_VERSION=v4
+
+set_settings(){
+    mongosh wekan --eval '
+    db.settings.updateOne(
+       {}, 
+       {
+         $set: { 
+           "disableForgotPassword": true,
+           "displayAuthenticationMethod" : false,
+           "disableRegistration" : true,
+           "customTopLeftCornerLogoImageUrl": "'$LOGO_IMG_URL'",
+           "customTopLeftCornerLogoLinkUrl": "'$LOGO_LINK_URL'",
+         } 
+       }
+    )'
+}
+
+show_mongo_version (){
+    mongosh --eval 'db.adminCommand( { getParameter: 1, featureCompatibilityVersion: 1 } )'
+}
+
+update_mongo_version (){
+    mongosh --eval 'db.adminCommand( { setFeatureCompatibilityVersion: "5.0" } )'
+}

compose.yml

@@ -1,29 +1,41 @@
-version: '3.8'
+version: "3.8"
 services:
   db:
-    image: mongo:5.0
-    command: mongod --oplogSize 128 --quiet
+    image: mongo:8.3
+    environment:
+      - LOGO_IMG_URL
+      - LOGO_LINK_URL
+    command: >
+      sh -c "
+        mongod --oplogSize 128 --replSet rs0 --quiet --bind_ip_all &
+        until mongosh --eval 'rs.initiate()' > /dev/null 2>&1; do
+          sleep 2
+        done;
+        wait"
     volumes:
       - wekan-db:/data/db
     networks:
       - internal
     healthcheck:
-      test:  echo 'db.runCommand("ping").ok' | mongo localhost:27017/test --quiet
+      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
       interval: 30s
       timeout: 10s
       retries: 10
       start_period: 1m
     deploy:
       labels:
-        backupbot.backup: "true"
+        backupbot.backup: "${ENABLE_BACKUPS:-true}"
         backupbot.backup.pre-hook: "mongodump --archive=/data/db/wekan.db"
-        backupbot.backup.post-hook: "rm -rf /data/db/wekan.db"
-        backupbot.backup.path: "/data/db/wekan.db"
+        backupbot.backup.volumes.wekan-db.path: "wekan.db"
+        backupbot.restore.post-hook: "mongorestore --drop --archive=/data/db/wekan.db"
 
   app:
-    image: quay.io/wekan/wekan:v7.30
+    image: quay.io/wekan/wekan:v10.79
     environment:
+      - METEOR_REACTIVITY_ORDER=changeStreams,oplog,polling
       - MONGO_URL=mongodb://db:27017/wekan
+      - MONGO_OPLOG_URL=mongodb://db:27017/local?replicaSet=rs0
+      - NODE_OPTIONS="--max_old_space_size=4096"
       - DOMAIN
       - ROOT_URL
       - DEBUG
@@ -51,6 +63,9 @@ services:
       - DEFAULT_AUTHENTICATION_METHOD
       - PROPAGATE_OIDC_DATA
       - OIDC_REDIRECTION_ENABLED
+      - WRITABLE_PATH=/data
+    volumes:
+      - wekan-files:/data:rw
     networks:
       - internal
       - proxy
@@ -78,16 +93,17 @@ services:
         order: start-first
       labels:
         - "traefik.enable=true"
-        - "traefik.docker.network=proxy"
+        - "traefik.swarm.network=proxy"
         - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=8080"
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`)"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        - "coop-cloud.${STACK_NAME}.version=2.1.1+v7.30"
-        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
+        - "coop-cloud.${STACK_NAME}.version=4.0.1+v10.79"
+        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
 
 volumes:
   wekan-db:
+  wekan-files:
 
 networks:
   proxy:

entrypoint.sh.tmpl

@@ -25,4 +25,8 @@ file_env() {
 }
 
 file_env "OAUTH2_SECRET"
-bash -c "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"
+# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
+#bash -c "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"
+# https://github.com/wekan/wekan/pull/5588
+#bash -c "ulimit -n 65500; exec node /build/main.js"
+bash -c "exec node /build/main.js"

release/3.0.0+v7.50

@@ -0,0 +1,7 @@
+Breaking Change: Update MongoDB from version 5.0 to 6.0.
+========================================================
+
+Before updating:
+
+Run `abra app cmd <app_domaon> db show_mongo_version` to check if the featureCompatibilityVersion is above 5.0 !
+Run `abra app cmd <app_domaon> db update_mongo_version` to set featureCompatibilityVersion to version 5.0

release/3.8.0+v8.82

@@ -0,0 +1 @@
+Don't update to 3.8.0+v8.82 if you use OIDC. Due to an bug OIDC is not working anymore.

release/4.0.0+v10.79

@@ -0,0 +1 @@
+It's a major version, with new mongo version, test carefully before deployment