chore: publish 6.12.0+2024.12.3 release

Merge branch 'main' of ssh://git.coopcloud.tech:2222/coop-cloud/authentik
Updates in response to PR feedback
2025-02-05 12:16:36 -05:00 · 2025-02-05 12:15:13 -05:00 · 2025-02-05 12:15:07 -05:00 · 2025-02-05 12:15:07 -05:00 · 2025-02-05 12:15:07 -05:00 · 2025-02-05 12:15:07 -05:00
14 changed files with 50 additions and 22 deletions
--- a/abra.sh
+++ b/abra.sh
@ -5,17 +5,17 @@ export FLOW_INVALIDATION_VERSION=v2
 export FLOW_RECOVERY_VERSION=v1
 export FLOW_TRANSLATION_VERSION=v3
 export SYSTEM_BRAND_VERSION=v4
-export NEXTCLOUD_CONFIG_VERSION=v2
-export WORDPRESS_CONFIG_VERSION=v3
-export MATRIX_CONFIG_VERSION=v2
-export WEKAN_CONFIG_VERSION=v4
-export VIKUNJA_CONFIG_VERSION=v2
-export OUTLINE_CONFIG_VERSION=v3
-export KIMAI_CONFIG_VERSION=v2
-export ZAMMAD_CONFIG_VERSION=v3
-export RALLLY_CONFIG_VERSION=v3
-export HEDGEDOC_CONFIG_VERSION=v2
-export MONITORING_CONFIG_VERSION=v3
+export NEXTCLOUD_CONFIG_VERSION=v3
+export WORDPRESS_CONFIG_VERSION=v4
+export MATRIX_CONFIG_VERSION=v3
+export WEKAN_CONFIG_VERSION=v5
+export VIKUNJA_CONFIG_VERSION=v3
+export OUTLINE_CONFIG_VERSION=v4
+export KIMAI_CONFIG_VERSION=v3
+export ZAMMAD_CONFIG_VERSION=v4
+export RALLLY_CONFIG_VERSION=v4
+export HEDGEDOC_CONFIG_VERSION=v3
+export MONITORING_CONFIG_VERSION=v4
 export DB_ENTRYPOINT_VERSION=v1
 export PG_BACKUP_VERSION=v2
 export ENTRYPOINT_CSS_VERSION=v1
--- a/compose.matrix.yml
+++ b/compose.matrix.yml
@ -12,6 +12,7 @@ services:
      - matrix_secret
    environment:
      - ELEMENT_DOMAIN
+      - MATRIX_DOMAIN
    configs:
      - source: matrix
        target: /blueprints/matrix.yaml
--- a/compose.outposts.ldap.yml
+++ b/compose.outposts.ldap.yml
@ -1,7 +1,7 @@
 version: "3.8"
 services:
  authentik_ldap:
-      image: ghcr.io/goauthentik/ldap:2024.10.5
+      image: ghcr.io/goauthentik/ldap:2024.12.3
      # Optionally specify which networks the container should be
      # might be needed to reach the core authentik server
      networks:
--- a/compose.yml
+++ b/compose.yml
@ -34,7 +34,7 @@ x-env: &env
 version: '3.8'
 services:
  app:
-    image: ghcr.io/goauthentik/server:2024.10.5
+    image: ghcr.io/goauthentik/server:2024.12.3
    command: server
    depends_on:
      - db
@ -72,11 +72,11 @@ services:
        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
        - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.customFrameOptionsValue=SAMEORIGIN"
        - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.contentSecurityPolicy=frame-ancestors ${X_FRAME_OPTIONS_ALLOW_FROM}"
-        - "coop-cloud.${STACK_NAME}.version=6.11.0+2024.10.5"
+        - "coop-cloud.${STACK_NAME}.version=6.12.0+2024.12.3"
        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"

  worker:
-    image: ghcr.io/goauthentik/server:2024.10.5
+    image: ghcr.io/goauthentik/server:2024.12.3
    command: worker
    depends_on:
      - db
@ -117,7 +117,7 @@ services:
      start_period: 5m

  db:
-    image: postgres:15.8
+    image: postgres:15.10
    secrets:
      - db_password
    configs:
@ -152,7 +152,7 @@ services:
          backupbot.restore.post-hook: '/pg_backup.sh restore'

  redis:
-    image:  redis:7.4.1-alpine
+    image:  redis:7.4.2-alpine
    command: --save 60 1 --loglevel warning
    networks:
      - internal
--- a/hedgedoc.yaml.tmpl
+++ b/hedgedoc.yaml.tmpl
@ -16,6 +16,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "HEDGEDOC_DOMAIN" }}/auth/oauth2/callback
    name: Hedgedoc
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
@ -32,7 +35,7 @@ entries:
  state: present

 - attrs:
-    meta_launch_url: https://{{ env  "HEDGEDOC_DOMAIN" }}
+    meta_launch_url: https://{{ env  "HEDGEDOC_DOMAIN" }}/auth/oauth2
    open_in_new_tab: true
    policy_engine_mode: any
    provider: !KeyOf hedgedoc_provider
--- a/kimai.yaml.tmpl
+++ b/kimai.yaml.tmpl
@ -37,7 +37,7 @@ entries:
  state: present

 - attrs:
-    meta_launch_url: https://{{ env  "KIMAI_DOMAIN" }}
+    meta_launch_url: https://{{ env  "KIMAI_DOMAIN" }}/auth/saml/login
    open_in_new_tab: true
    policy_engine_mode: any
    provider: !KeyOf kimai_provider
--- a/matrix.yaml.tmpl
+++ b/matrix.yaml.tmpl
@ -16,6 +16,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "MATRIX_DOMAIN" }}/_synapse/client/oidc/callback
    name: Matrix
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
@ -36,10 +39,10 @@ entries:
    open_in_new_tab: true
    policy_engine_mode: any
    provider: !KeyOf matrix_provider
-    slug: matrix
+    name: Element
  conditions: []
  id: matrix_application
  identifiers:
-    name: Matrix
+    slug: matrix
  model: authentik_core.application
  state: present
--- a/monitoring.yaml.tmpl
+++ b/monitoring.yaml.tmpl
@ -16,6 +16,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "MONITORING_DOMAIN" }}/login/generic_oauth
    name: Monitoring
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
--- a/nextcloud.yaml.tmpl
+++ b/nextcloud.yaml.tmpl
@ -28,6 +28,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "NEXTCLOUD_DOMAIN" }}/apps/sociallogin/custom_oidc/authentik
    name: Nextcloud
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
--- a/outline.yaml.tmpl
+++ b/outline.yaml.tmpl
@ -16,6 +16,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "OUTLINE_DOMAIN" }}/auth/oidc.callback
    name: Outline
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
@ -32,7 +35,7 @@ entries:
  state: present

 - attrs:
-    meta_launch_url: https://{{ env  "OUTLINE_DOMAIN" }}
+    meta_launch_url: https://{{ env  "OUTLINE_DOMAIN" }}/auth/oidc
    open_in_new_tab: true
    policy_engine_mode: any
    provider: !KeyOf outline_provider
--- a/rallly.yaml.tmpl
+++ b/rallly.yaml.tmpl
@ -16,6 +16,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "RALLLY_DOMAIN" }}/api/auth/callback/oidc
    name: Rallly
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
--- a/vikunja.yaml.tmpl
+++ b/vikunja.yaml.tmpl
@ -16,6 +16,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "VIKUNJA_DOMAIN" }}/auth/openid/authentik
    name: Vikunja
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
--- a/wekan.yaml.tmpl
+++ b/wekan.yaml.tmpl
@ -33,6 +33,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "WEKAN_DOMAIN" }}/_oauth/oidc
    name: Wekan
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
--- a/wordpress.yaml.tmpl
+++ b/wordpress.yaml.tmpl
@ -16,6 +16,9 @@ entries:
    client_type: confidential
    include_claims_in_id_token: true
    issuer_mode: per_provider
+    redirect_uris:
+    - matching_mode: strict
+      url: https://{{ env  "WORDPRESS_DOMAIN" }}/openid-connect-authorize
    name: Wordpress
    property_mappings:
    - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
Author	SHA1	Message	Date
3wc	35d48cc4c4	chore: publish 6.12.0+2024.12.3 release	2025-02-05 12:16:36 -05:00
3wc	64100ce3a4	Merge branch 'main' of ssh://git.coopcloud.tech:2222/coop-cloud/authentik	2025-02-05 12:15:13 -05:00
3wc	abc1ed307c	Updates in response to PR feedback	2025-02-05 12:15:07 -05:00
knoflook	a5b5395bdf	update .env.sample and drop unused volume	2025-02-05 12:15:07 -05:00
knoflook	97ce2e451a	don't create a new volume	2025-02-05 12:15:07 -05:00
3wc	98a5d4b726	Work towards custom CSS in volume	2025-02-05 12:15:07 -05:00
Moritz	d0c924a864	chore: publish 6.11.1+2024.10.5 release	2025-01-20 22:28:24 +01:00
Moritz	5df1f34cd7	UX: rename matrix to element	2025-01-20 22:28:24 +01:00
Moritz	bc62831e58	fix blueprints: add redirect_uris	2025-01-20 22:28:20 +01:00