adds maintenance.md and updates readme to maintainers

.drone.yml

@@ -18,7 +18,7 @@ steps:
       STACK_NAME: wekan
       LETS_ENCRYPT_ENV: production
       SECRET_OAUTH2_SECRET_VERSION: v1
-      ENTRYPOINT_VERSION: v1
+      ENTRYPOINT_VERSION: v2
       SECRET_OAUTH2_SECRET_VERSION: v1
 trigger:
   branch:
@@ -35,7 +35,7 @@ steps:
         from_secret: drone_abra-bot_token
       fork: true
       repositories:
-        - coop-cloud/auto-recipes-catalogue-json
+        - toolshed/auto-recipes-catalogue-json
 
 trigger:
   event: tag

.env.sample

@@ -1,5 +1,5 @@
 TYPE=wekan
-TIMEOUT=300
+#TIMEOUT=
 ENABLE_AUTO_UPDATE=true
 ENABLE_BACKUPS=true
 LETS_ENCRYPT_ENV=production

MAINTENANCE.md

@@ -0,0 +1,32 @@
+# wekan Recipe Maintenance
+
+All contributions should be made via a pull request. This is to ensure a
+certain quality and consistency, that others can rely on.
+
+## Maintainer Responsibilities
+
+A recipe maintainer has the following responsibilities:
+
+- Respond to pull requests / issues within two weeks
+- Make image security updates within a week
+- Make image major updates every three months
+
+In order to fullfill these responsibilities a recipe maintainer:
+
+- Has to watch the repository (to get notifications)
+- Needs to make sure renovate is configured properly
+
+## Pull Requests
+
+A pull request can be merged if it is approved by at least one maintainer. For
+pull requests opened by a maintainer they need to be approved by another
+maintainer. Even though it is okay to merge a pull request with one approval, it
+is always better if all maintainers looked at the pull request and approved it.
+
+## Become a maintainer
+
+Everyone can apply to be a recipe maintainer:
+1. Watch the repository to always get updates
+2. Simply add your self to the list in the [README.md](./README.md) and open a new pull request with the change.
+3. Once the pull request gets merged you will be added to the [wekan maintainers team](https://git.coopcloud.tech/org/coop-cloud/teams/wekan-maintainers).
+4. Join the room [#cc-|-wekan-maintenance:matrix.org](#cc-|-wekan-maintenance:matrix.org) and chat to other maintainers.

README.md

@@ -4,6 +4,7 @@ The Open Source kanban (built with Meteor)
 [Github](https://github.com/wekan/wekan)
 
 <!-- metadata -->
+* **Maintainer**: Local-IT: [@moritz](https://git.coopcloud.tech/moritz), [@msimon](https://git.coopcloud.tech/simon), [@carla](https://git.coopcloud.tech/carla)
 * **Category**: Apps
 * **Status**: ?
 * **Image**: [`quay.io/wekan/wekan`](https://quay.io/repository/wekan/wekan)

abra.sh

@@ -1,4 +1,4 @@
-export ENTRYPOINT_VERSION=v2
+export ENTRYPOINT_VERSION=v4
 
 set_settings(){
     mongosh wekan --eval '

compose.yml

@@ -1,17 +1,23 @@
-version: '3.8'
+version: "3.8"
 services:
   db:
-    image: mongo:6.0
+    image: mongo:8.3
     environment:
-        - LOGO_IMG_URL
-        - LOGO_LINK_URL
-    command: mongod --oplogSize 128 --quiet
+      - LOGO_IMG_URL
+      - LOGO_LINK_URL
+    command: >
+      sh -c "
+        mongod --oplogSize 128 --replSet rs0 --quiet --bind_ip_all &
+        until mongosh --eval 'rs.initiate()' > /dev/null 2>&1; do
+          sleep 2
+        done;
+        wait"
     volumes:
       - wekan-db:/data/db
     networks:
       - internal
     healthcheck:
-      test:  echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
+      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
       interval: 30s
       timeout: 10s
       retries: 10
@@ -21,12 +27,14 @@ services:
         backupbot.backup: "${ENABLE_BACKUPS:-true}"
         backupbot.backup.pre-hook: "mongodump --archive=/data/db/wekan.db"
         backupbot.backup.volumes.wekan-db.path: "wekan.db"
-        backupbot.restore.post-hook: 'mongorestore --drop --archive=/data/db/wekan.db'
+        backupbot.restore.post-hook: "mongorestore --drop --archive=/data/db/wekan.db"
 
   app:
-    image: quay.io/wekan/wekan:v7.61
+    image: quay.io/wekan/wekan:v10.79
     environment:
+      - METEOR_REACTIVITY_ORDER=changeStreams,oplog,polling
       - MONGO_URL=mongodb://db:27017/wekan
+      - MONGO_OPLOG_URL=mongodb://db:27017/local?replicaSet=rs0
       - NODE_OPTIONS="--max_old_space_size=4096"
       - DOMAIN
       - ROOT_URL
@@ -57,7 +65,7 @@ services:
       - OIDC_REDIRECTION_ENABLED
       - WRITABLE_PATH=/data
     volumes:
-        - wekan-files:/data:rw
+      - wekan-files:/data:rw
     networks:
       - internal
       - proxy
@@ -85,13 +93,13 @@ services:
         order: start-first
       labels:
         - "traefik.enable=true"
-        - "traefik.docker.network=proxy"
+        - "traefik.swarm.network=proxy"
         - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=8080"
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`)"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        - "coop-cloud.${STACK_NAME}.version=3.1.0+v7.61"
-        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
+        - "coop-cloud.${STACK_NAME}.version=4.0.1+v10.79"
+        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
 
 volumes:
   wekan-db:

entrypoint.sh.tmpl

@@ -25,4 +25,8 @@ file_env() {
 }
 
 file_env "OAUTH2_SECRET"
-bash -c "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"
+# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
+#bash -c "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"
+# https://github.com/wekan/wekan/pull/5588
+#bash -c "ulimit -n 65500; exec node /build/main.js"
+bash -c "exec node /build/main.js"

release/3.8.0+v8.82

@@ -0,0 +1 @@
+Don't update to 3.8.0+v8.82 if you use OIDC. Due to an bug OIDC is not working anymore.

release/4.0.0+v10.79

@@ -0,0 +1 @@
+It's a major version, with new mongo version, test carefully before deployment