chore: add update server to csp.yaml (cors)

Merge pull request #110 from opencloud-eu/fix/do-not-expose-ldap-service
enhane: do not expose ldap service
2026-06-08 20:20:04 +08:00 · 2025-10-13 13:20:40 +02:00 · 2025-10-07 11:39:06 +02:00 · 2025-10-07 11:08:35 +02:00 · 2025-10-04 16:36:45 +02:00 · 2025-10-04 16:23:37 +02:00
5 changed files with 6 additions and 11 deletions
--- a/.env.example
+++ b/.env.example
@@ -59,7 +59,7 @@ TRAEFIK_SERVICES_TLS_CONFIG="tls.certresolver=letsencrypt"
 #       stores:
 #         - default
 #
-# The certificates need to copied into ./certs/, the absolute path inside the container is /certs/.
+# The certificates need to be copied into ./certs/, the absolute path inside the container is /certs/.
 # You can also use TRAEFIK_CERTS_DIR=/path/on/host to set the path to the certificates directory.
 # Enable the access log for Traefik by setting the following variable to true.
 TRAEFIK_ACCESS_LOG=
--- a/config/keycloak/opencloud-realm.dist.json
+++ b/config/keycloak/opencloud-realm.dist.json
@@ -2336,7 +2336,7 @@
            "always"
          ],
          "usePasswordModifyExtendedOp": [
-            "false"
+            "true"
          ],
          "trustEmail": [
            "false"
--- a/config/opencloud/csp.yaml
+++ b/config/opencloud/csp.yaml
@@ -8,6 +8,7 @@ directives:
    - 'wss://${COMPANION_DOMAIN|companion.opencloud.test}/'
    - 'https://raw.githubusercontent.com/opencloud-eu/awesome-apps/'
    - 'https://${IDP_DOMAIN|keycloak.opencloud.test}/'
+    - 'https://update.opencloud.eu/'
  default-src:
    - '''none'''
  font-src:
--- a/idm/external-idp.yml
+++ b/idm/external-idp.yml
@@ -44,7 +44,7 @@ services:
      # The openCloud users need to be able to edit their account in the externa IdP
      WEB_OPTION_ACCOUNT_EDIT_LINK_HREF: ${IDP_ACCOUNT_URL}
  ldap-server:
-    image: bitnami/openldap:2.6
+    image: bitnamilegacy/openldap:2.6
    networks:
      opencloud-net:
    entrypoint: [ "/bin/sh", "/opt/bitnami/scripts/openldap/docker-entrypoint-override.sh", "/opt/bitnami/scripts/openldap/run.sh" ]
@@ -57,9 +57,6 @@ services:
      LDAP_TLS_KEY_FILE: /opt/bitnami/openldap/share/openldap.key
      LDAP_ROOT: "dc=opencloud,dc=eu"
      LDAP_ADMIN_PASSWORD: ${LDAP_BIND_PASSWORD:-admin}
-    ports:
-      - "127.0.0.1:389:1389"
-      - "127.0.0.1:636:1636"
    volumes:
      # Only use the base ldif file to create the base structure
      - ./config/ldap/ldif/10_base.ldif:/ldifs/10_base.ldif
--- a/idm/ldap-keycloak.yml
+++ b/idm/ldap-keycloak.yml
@@ -51,9 +51,6 @@ services:
      LDAP_TLS_KEY_FILE: /opt/bitnami/openldap/share/openldap.key
      LDAP_ROOT: "dc=opencloud,dc=eu"
      LDAP_ADMIN_PASSWORD: ${LDAP_BIND_PASSWORD:-admin}
-    ports:
-      - "127.0.0.1:389:1389"
-      - "127.0.0.1:636:1636"
    volumes:
      - ./config/ldap/ldif/10_base.ldif:/ldifs/10_base.ldif
      - ./config/ldap/ldif/20_admin.ldif:/ldifs/20_admin.ldif
Author	SHA1	Message	Date
Alexander Ackermann	6be2c824ea	chore: add update server to csp.yaml (cors)	2025-10-13 13:20:40 +02:00
Thomas Schweiger	3d82f1b60b	Merge pull request #110 from opencloud-eu/fix/do-not-expose-ldap-service enhane: do not expose ldap service	2025-10-07 11:39:06 +02:00
Thomas Schweiger	c55b36b559	enhane: do not expose ldap service	2025-10-07 11:08:35 +02:00
Michael Barz	ce65001eba	Merge pull request #107 from mwllgr/main Change image for OpenLDAP in external-idp to bitnamilegacy	2025-10-04 16:36:45 +02:00
mwllgr	b88b80539b	Change image for OpenLDAP in external-idp to bitnamilegacy	2025-10-04 16:23:37 +02:00
Thomas Schweiger	6502f1fee7	Merge pull request #103 from opencloud-eu/fix/enable-password-hashing-for-ldap fix: fix passwords, changed via Keycloak, are not hashed in LDAP #102	2025-09-30 19:23:21 +02:00
Thomas Schweiger	ef64eb6b92	fix: fix passwords changed via Keycloak are not hashed in LDAP #102	2025-09-30 14:21:11 +02:00
Thomas Schweiger	07183c14fc	Merge pull request #101 from opencloud-eu/traefik-enable-local-certs fix: fix syntax of certs.yml configuration file example	2025-09-29 17:18:09 +02:00
Thomas Schweiger	409d775471	fix: fix typo	2025-09-29 14:42:45 +02:00
Thomas Schweiger	ad89914a81	fix: fix syntax of certs.yml configuration file example	2025-09-29 14:12:37 +02:00
Michael Flemming	5c26c75080	Merge pull request #100 from opencloud-eu/pin_postgres_version quick fix for breaking changes in postgres 18 by pinning to 17	2025-09-26 17:53:21 +02:00