update nextcloud version

add odoo-dev
fix wrong name
2024-02-16 22:32:36 +01:00 · 2024-02-16 22:31:45 +01:00 · 2024-02-16 22:31:11 +01:00 · 2024-01-20 21:02:38 +01:00 · 2024-01-20 08:49:11 +01:00 · 2024-01-20 08:48:05 +01:00
17 changed files with 578 additions and 222 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1,2 @@
+.autorestic.env
+.autorestic.lock.yml
--- a/README.md
+++ b/README.md
@@ -25,12 +25,11 @@ sudo -u postgres pg_dump -Fc  nc > nc.dump
 ```
 3. Sauver les données du dossier nextcloud
 ```
-mkdir /var/lib/backuppc/migration
-tar caf /var/lib/backuppc/migration/nextcloud.tar.xz /srv/nextcloud/
+mkdir -p /var/lib/backuppc/migration/data
+cp -r /srv/nextcloud/ /var/lib/backuppc/migration/data
 ```
 4. Sauver le fichier de configuration de nextcloud
 ```
-# par précaution, ne devrait pas être utile
 cp /var/www/nextcloud/public_html/config/config.php /var/lib/backuppc/migration
 ```

@@ -40,11 +39,23 @@ installation de proxmox, vm, docker.

 ### Installation des services

-1. Cloner le repo de l'infra
+1. Cloner le repo de l'infra et le mettre au bon endroit
 ``` 
 git clone https://yuno.oiseauroch.fr/gitea/tobias/infra-oasis21.git
+mkdir -p /DATA/docker
+mv infra_oasis21 /DATA/docker/services
+```
+2. copy file `config.php` and change values
+```
+cp /var/lib/backuppc/migration/config.php .
+# change host for redis
+sed -i 's#/run/redis/redis.sock#redis#' config.php
+# change dbhost 
+sed -i 's#localhost#nextcloud-db#' config.php
+# change datadirectory
+sed -i 's#/srv/nextcloud#/var/www/html/data#' config.php
+
 ```
-2. Create `config.php` from the file in vaultwarden
 3. Move `secrets/librezo.secrets.example` to `secrets/librezo.secrets` 
 4.Replace **nextcloud** and **collabora** password from vaultwarden
 ```
@@ -68,13 +79,21 @@ docker-compose up -d nextcloud-db
 docker-compose exec nextcloud-db sh -c "pg_restore -d nc -U nc nc.dmp"
 docker-compose exec nextcloud-db rm /nc.dmp
 ```
-7. Copy files 
+7. Copy files and set correct rights
 ```
-docker cp /your/files nextcloud-app:/var/www/html/
+docker cp /var/lib/backuppc/migration/data nextcloud-app:/var/www/html/
+cp config.php nextcloud-app:/var/www/html/config/config.php
 docker-compose up -d nextcloud-app 
 docker-compose exec nextcloud-app chown -R www-data:www-data /var/www/html/data
+docker-compose exec nextcloud-app chown -R www-data:www-data /var/www/html/config/config.php
 ```
-8. change `config.php` rights
+8. restart docker-compose
 ```
-docker-compose exec nextcloud-app chown -R www-data:www-data /var/www/html/config
+docker-compose restart
 ```
+
+### Configure collabora <!--onlyoffice?-->
+1. connect to nextcloud
+2. go to paramètres->nextcloud office-> utiliser mon propre serveur
+3. choisir `code.oasis21.org`, décocher l'option `ne pas vérifier le certificat`
+4. désinstaller l'application collabora built-in serveur
--- a/backups/.autorestic.yml
+++ b/backups/.autorestic.yml
@@ -0,0 +1,81 @@
+version: 2
+
+
+global:
+  forget:
+    keep-hourly: 24
+    keep-daily: 7
+    keep-weekly: 4
+    keep-monthly: 12
+
+backends:
+  fch:
+    type: sftp
+    path: FCH_serveur:backups/
+
+locations:
+  nextcloud_data:
+    from:
+    - /var/lib/docker/volumes/docker_nextcloud
+    to:
+    - fch
+    cron: 0 0 * * *
+    forget: prune
+
+
+  nextcloud_conf:
+    from:
+    - /var/lib/docker/volumes/docker_nextcloud-conf
+    to:
+    - fch
+    cron: 0 0 * * *
+    forget: prune
+
+  nextcloud_data:
+    from:
+    - /var/lib/docker/volumes/docker_nextcloud
+    to:
+    - fch
+    cron: 0 0 * * *
+    forget: prune
+
+  nextcloud_db:
+    from:
+    - /DATA/dump_bdd/nextcloud-db
+    to:
+    - fch
+    cron: 0 0 * * *
+    forget: prune
+    hooks:
+      before:
+      - /DATA/docker/services/backups/backup_db.sh nextcloud-db  postgresql
+
+  onlyoffice:
+    from:
+    - /var/lib/docker/volumes/docker_onlyoffice-cache
+    - /var/lib/docker/volumes/docker_onlyoffice-data
+    to:
+    - fch
+    cron: 0 0 * * *
+    forget: prune
+
+  traefik-certs:
+     from:
+     - /DATA/docker/services/certs
+     to:
+     - fch
+     cron: 0 0 * * *
+     forget: prune
+
+  repos:
+     from:
+     - /DATA/docker/services/
+     to:
+     - fch
+     options:
+       backup:
+         exclude:
+         - '.git'
+     cron: 0 0 * * *
+     forget: prune
+
--- a/backups/autorestic.service
+++ b/backups/autorestic.service
@@ -0,0 +1,10 @@
+[Unit]
+Description=Backups yay
+ 
+[Service]
+Type=oneshot
+ExecStart=autorestic -c /DATA/docker/services/backups/.autorestic.yml --ci cron
+# fail if backup takes more than 1 day
+TimeoutStartSec=86400
+IPAccounting=yes
+MemoryAccounting=yes
--- a/backups/autorestic.timer
+++ b/backups/autorestic.timer
@@ -0,0 +1,9 @@
+[Unit]
+Description=Backups yay
+ 
+[Timer]
+# Trigger every 10 minutes
+OnCalendar=*:0/10:0
+ 
+[Install]
+WantedBy=timers.target
--- a/backups/backup_db.sh
+++ b/backups/backup_db.sh
@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+
+# usage: <script> <container-name> <database-type>
+# 
+# exports the database of a running docker container in a dump in $BACKUP_DIR/$CONTAINER_NAME/
+
+BACKUP_DIR=/DATA/dump_bdd/
+
+# Check container existence
+
+CONTAINER="$1"
+
+if ! docker ps | grep -q "$CONTAINER"
+then
+  echo "The container $CONTAINER doesn't exist or doesn't run"
+  exit 1
+fi
+
+# Check database type
+
+TYPE="$2"
+
+COMMAND=""
+
+case "$TYPE" in
+  postgresql)
+    POSTGRES_USER=$(docker exec "$CONTAINER" env | grep POSTGRES_USER | cut -d= -f2)
+    COMMAND="pg_dumpall -c -U $POSTGRES_USER"
+    EXTENSION=sql
+    ;;
+  mariadb)
+    MARIADB_USER=$(docker exec "$CONTAINER" env | grep MYSQL_USER | cut -d= -f2)
+    MARIADB_PASSWORD=$(docker exec "$CONTAINER" env | grep MYSQL_PASSWORD | cut -d= -f2)
+    COMMAND="mariadb-dump -u $MARIADB_USER --password=$MARIADB_PASSWORD --all-databases"
+    EXTENSION=sql
+    ;;
+  mongodb)
+    COMMAND="mongodump --archive"
+    EXTENSION=mongodump
+    ;;
+  ldap-config)
+    COMMAND="slapcat -n 0"
+    EXTENSION=config.ldif
+    ;;
+  ldap-content)
+    COMMAND="slapcat -n 1"
+    EXTENSION=content.ldif
+    ;;
+  *)
+    echo "I don't know $TYPE database type."
+    exit 1
+esac
+
+# Ensure directory exists
+
+mkdir -p "$BACKUP_DIR/$CONTAINER"
+
+# Export database
+
+docker exec "$CONTAINER" $COMMAND > "$BACKUP_DIR/$CONTAINER/dump.$EXTENSION"
+exit $?
--- a/dump_bdd_volumes.sh
+++ b/dump_bdd_volumes.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+docker exec nextcloud-db pg_dumpall -U nc > /DATA/dump_bdd/nextcloud.sql
--- a/nextcloud/docker-compose.yml
+++ b/nextcloud/docker-compose.yml
@@ -2,9 +2,15 @@ version: '3.7'

 volumes:
  nextcloud-db:
-    name: docker_nextcloud-db
-  nextcloud:
+    name: docker_nextcloud-db-15
+  nextcloud-data:
    name: docker_nextcloud
+  nextcloud:
+    name: docker_nextcloud-conf
+  onlyoffice-cache:
+    name: docker_onlyoffice-cache
+  onlyoffice-db:
+    name: docker_onlyoffice-db

 networks:
  nextcloud:
@@ -13,14 +19,15 @@ networks:

 services:
  nextcloud-app:
-    image: nextcloud:23.0
+    image: nextcloud-cron:26.0.11
+    build: .
    container_name: nextcloud-app
    restart: unless-stopped
+    extra_hosts :
+      office.oasis21.org : 172.16.7.10
    volumes:
      - nextcloud:/var/www/html
-      #- ./config.php:/var/www/html/config/config.php
-      #- ./zz-php-custom.ini:/usr/local/etc/php/conf.d/zz-php-custom.ini
-      #- ./zz-php-fpm-custom.conf:/usr/local/etc/php-fpm.d/zz-php-custom.conf
+      - nextcloud-data:/var/www/html/data
    environment:
      - "TZ=Europe/Paris"
      - REDIS_HOST=redis
@@ -31,32 +38,31 @@ services:
    networks:
      - nextcloud
      - proxy
-    restart: unless-stopped
    labels:
      traefik.http.routers.nextcloud-web.entrypoints: websecure
      traefik.http.routers.nextcloud-web.rule: Host(`cloud.oasis21.org`)
      traefik.http.services.nextcloud-web.loadbalancer.server.port: 80
      traefik.enable: true
      # https://docs.nextcloud.com/server/16/admin_manual/configuration_server/reverse_proxy_configuration.html
-      traefik.http.routers.nextcloud-web.middlewares: nextcloud-web@docker
+      traefik.http.routers.nextcloud-web.middlewares: nextcloud-web@docker, allowFrameAndCORS@file
      traefik.http.middlewares.nextcloud-web.redirectregex.permanent: true
-      traefik.http.middlewares.nextcloud-web.redirectregex.regex: ^/.well-known/(card|cal)dav
-      traefik.http.middlewares.nextcloud-web.redirectregex.replacement: /remote.php/dav/
-    restart: unless-stopped
+      traefik.http.middlewares.nextcloud-web.redirectregex.regex: "https://(.*)/.well-known/(card|cal)dav"
+      traefik.http.middlewares.nextcloud-web.redirectregex.replacement: "https://$${1}/remote.php/dav/"

  redis:
-    image: redis
-    image: 'bitnami/redis:latest'
+    image: 'bitnami/redis:7.0.10'
    container_name: redis
+    restart: unless-stopped
    environment:
      - "TZ=Europe/Paris"
+      - ALLOW_EMPTY_PASSWORD=yes
    env_file: ./secrets/librezo.secrets
    networks:
      - nextcloud


  nextcloud-db:
-    image: postgres:11
+    image: postgres:15-alpine
    container_name: nextcloud-db
    volumes:
      - nextcloud-db:/var/lib/postgresql/data
@@ -67,34 +73,31 @@ services:
      - "TZ=Europe/Paris"
    restart: unless-stopped

-  collabora:
-    image: libreoffice/online:master
-    container_name: collabora
-    volumes:
-      - ./loolwsd.xml:/etc/loolwsd/loolwsd.xml
-     #- ./zz-php-fpm-custom.conf:/usr/local/etc/php-fpm.d/zz-php-custom.conf
-#    ports:
-#      - 9980:9980
-#    expose:
-#      - "9980" 
+  onlyoffice:
+    build: 
+      context: .
+      dockerfile: ./dockerfile-oo
+    container_name: onlyoffice
+    image: onlyoffice:7.5.1
+    restart: unless-stopped
+    extra_hosts :
+      cloud.oasis21.org : 172.16.7.10
    environment:
-      - "TZ=Europe/Paris"
-      - domain=cloud\.calad\.re
-#      - username=${COLLABORA_USER}
-#      - password=${COLLABORA_PASSWORD}
-      - serveur_name=code\.calad\.re
-      - "extra_params=--o:ssl.enable=false --o:ssl.termination=true"
-    networks:
+      - JWT_ENABLED=true
+      - JWT_SECRET=MvaG9zdHMgCnN1ZG8gbmFubyAvZXRjL2hvc3RzIApzY3AgVMOpbMOpY
+      - FORCESAVE_ENABLE=true
+      - FORCESAVE_INTERVAL=2m
+      - FORCESAVE_STEP=5m
+    volumes:
+      - onlyoffice-cache:/var/lib/onlyoffice/documentserver/App_Data
+      - onlyoffice-db:/var/lib/postgresql
+    labels:
+      traefik.http.routers.onlyoffice.entrypoints: websecure
+      traefik.http.routers.onlyoffice.rule: Host(`office.oasis21.org`)
+      traefik.http.services.onlyoffice.loadbalancer.server.port: 80
+      traefik.enable: true
+      traefik.http.routers.onlyoffice.middlewares: allowFrameAndCORS@file, onlyoffice-sslheaders
+      traefik.http.middlewares.onlyoffice-sslheaders.headers.customrequestheaders.X-Forwarded-Proto: "https"
+    networks: 
      - nextcloud
      - proxy
-    env_file: ./secrets/librezo.secrets
-    cap_add:
-      - MKNOD
-    restart:
-      unless-stopped
-    labels:
-      traefik.http.routers.collabora.entrypoints: websecure
-      traefik.http.routers.collabora.rule: Host(`code.oasis21.org`)
-      traefik.http.services.collabora.loadbalancer.server.port: 9980
-      traefik.enable: true
-
--- a/nextcloud/dockerfile
+++ b/nextcloud/dockerfile
@@ -0,0 +1,15 @@
+FROM nextcloud:26.0.11-apache
+
+ARG VERSION
+
+RUN apt-get update && apt-get install -y \
+    supervisor \
+    libmagickcore-6.q16-6-extra \
+  && rm -rf /var/lib/apt/lists/* \
+  && mkdir /var/log/supervisord /var/run/supervisord
+
+COPY supervisord.conf /
+
+ENV NEXTCLOUD_UPDATE=1
+
+CMD ["/usr/bin/supervisord", "-c", "/supervisord.conf"]
--- a/nextcloud/dockerfile-oo
+++ b/nextcloud/dockerfile-oo
@@ -0,0 +1,9 @@
+FROM thomisus/onlyoffice-documentserver-unlimited:7.5.1
+
+ARG VERSION
+
+RUN sed -i '27i FORCESAVE_ENABLE=${FORCESAVE_ENABLE:-false}\nFORCESAVE_INTERVAL=${FORCESAVE_INTERVAL:-5m}\nFORCESAVE_STEP=${FORCESAVE_STEP:-1m}\n' /app/ds/run-document-server.sh
+RUN sed -i '340i  ${JSON} -I -e "if(this.services.CoAuthoring.autoAssembly===undefined)this.services.CoAuthoring.autoAssembly={};"' /app/ds/run-document-server.sh
+RUN sed -i '341i  ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.enable = ${FORCESAVE_ENABLE}"' /app/ds/run-document-server.sh
+RUN sed -i '342i  ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.interval = \x27${FORCESAVE_INTERVAL}\x27"' /app/ds/run-document-server.sh
+RUN sed -i '343i  ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.step = \x27${FORCESAVE_STEP}\x27"\n' /app/ds/run-document-server.sh
--- a/nextcloud/loolwsd.xml
+++ b/nextcloud/loolwsd.xml
@@ -1,166 +0,0 @@
-<config>
-
-    <!-- Note: 'default' attributes are used to document a setting's default value as well as to use as fallback. -->
-    <!-- Note: When adding a new entry, a default must be set in WSD in case the entry is missing upon deployment. -->
-
-    <allowed_languages desc="List of supported languages of Writing Aids (spell checker, grammar checker, thesaurus, hyphenation) on this instance. Allowing too many has negative effect on startup performance." default="de_DE en_GB en_US es_ES fr_FR it nl pt_BR pt_PT ru">en_GB en_US fr_FR </allowed_languages>
-
-    <sys_template_path desc="Path to a template tree with shared libraries etc to be used as source for chroot jails for child processes." type="path" relative="true" default="systemplate"></sys_template_path>
-    <child_root_path desc="Path to the directory under which the chroot jails for the child processes will be created. Should be on the same file system as systemplate and lotemplate. Must be an empty directory." type="path" relative="true" default="jails"></child_root_path>
-
-    <server_name desc="External hostname:port of the server running loolwsd. If empty, it's derived from the request (please set it if this doesn't work). Must be specified when behind a reverse-proxy or when the hostname is not reachable directly." type="string" default="">code.oasis21.org</server_name>
-    <file_server_root_path desc="Path to the directory that should be considered root for the file server. This should be the directory containing loleaflet." type="path" relative="true" default="loleaflet/../"></file_server_root_path>
-
-    <memproportion desc="The maximum percentage of system memory consumed by all of the LibreOffice Online, after which we start cleaning up idle documents" type="double" default="80.0"></memproportion>
-    <num_prespawn_children desc="Number of child processes to keep started in advance and waiting for new clients." type="uint" default="1">1</num_prespawn_children>
-    <per_document desc="Document-specific settings, including LO Core settings.">
-        <max_concurrency desc="The maximum number of threads to use while processing a document." type="uint" default="4">4</max_concurrency>
-        <batch_priority desc="A (lower) priority for use by batch eg. convert-to processes to avoid starving interactive ones" type="uint" default="5">5</batch_priority>
-        <document_signing_url desc="The endpoint URL of signing server, if empty the document signing is disabled" type="string" default=""></document_signing_url>
-        <redlining_as_comments desc="If true show red-lines as comments" type="bool" default="false">false</redlining_as_comments>
-        <idle_timeout_secs desc="The maximum number of seconds before unloading an idle document. Defaults to 1 hour." type="uint" default="3600">3600</idle_timeout_secs>
-        <!-- Idle save and auto save are checked every 30 seconds -->
-        <!-- They are disabled when the value is zero or negative. -->
-        <idlesave_duration_secs desc="The number of idle seconds after which document, if modified, should be saved. Defaults to 30 seconds." type="int" default="30">30</idlesave_duration_secs>
-        <autosave_duration_secs desc="The number of seconds after which document, if modified, should be saved. Defaults to 5 minutes." type="int" default="300">300</autosave_duration_secs>
-        <always_save_on_exit desc="On exiting the last editor, always perform the save, even if the document is not modified." type="bool" default="false">false</always_save_on_exit>
-        <limit_virt_mem_mb desc="The maximum virtual memory allowed to each document process. 0 for unlimited." type="uint">0</limit_virt_mem_mb>
-        <limit_stack_mem_kb desc="The maximum stack size allowed to each document process. 0 for unlimited." type="uint">8000</limit_stack_mem_kb>
-        <limit_file_size_mb desc="The maximum file size allowed to each document process to write. 0 for unlimited." type="uint">0</limit_file_size_mb>
-        <limit_num_open_files desc="The maximum number of files allowed to each document process to open. 0 for unlimited." type="uint">0</limit_num_open_files>
-        <limit_load_secs desc="Maximum number of seconds to wait for a document load to succeed. 0 for unlimited." type="uint" default="100">100</limit_load_secs>
-        <limit_convert_secs desc="Maximum number of seconds to wait for a document conversion to succeed. 0 for unlimited." type="uint" default="100">100</limit_convert_secs>
-    </per_document>
-
-    <per_view desc="View-specific settings.">
-        <out_of_focus_timeout_secs desc="The maximum number of seconds before dimming and stopping updates when the browser tab is no longer in focus. Defaults to 120 seconds." type="uint" default="120">120</out_of_focus_timeout_secs>
-        <idle_timeout_secs desc="The maximum number of seconds before dimming and stopping updates when the user is no longer active (even if the browser is in focus). Defaults to 15 minutes." type="uint" default="900">900</idle_timeout_secs>
-    </per_view>
-
-    <loleaflet_html desc="Allows UI customization by replacing the single endpoint of loleaflet.html" type="string" default="loleaflet.html">loleaflet.html</loleaflet_html>
-
-    <logging>
-        <color type="bool">true</color>
-        <level type="string" desc="Can be 0-8, or none (turns off logging), fatal, critical, error, warning, notice, information, debug, trace" default="warning">debug</level>
-        <protocol type="bool" descr="Enable minimal client-site JS protocol logging from the start">true</protocol>
-        <file enable="false">
-            <property name="path" desc="Log file path.">/var/log/loolwsd.log</property>
-            <property name="rotation" desc="Log file rotation strategy. See Poco FileChannel.">50M</property>
-            <property name="archive" desc="Append either timestamp or number to the archived log filename.">timestamp</property>
-            <property name="compress" desc="Enable/disable log file compression.">true</property>
-            <property name="purgeAge" desc="The maximum age of log files to preserve. See Poco FileChannel.">10 days</property>
-            <property name="purgeCount" desc="The maximum number of log archives to preserve. Use 'none' to disable purging. See Poco FileChannel.">10</property>
-            <property name="rotateOnOpen" desc="Enable/disable log file rotation on opening.">true</property>
-            <property name="flush" desc="Enable/disable flushing after logging each line. May harm performance. Note that without flushing after each line, the log lines from the different processes will not appear in chronological order.">false</property>
-        </file>
-        <anonymize>
-            <anonymize_user_data type="bool" desc="Enable to anonymize/obfuscate of user-data in logs. If default is true, it was forced at compile-time and cannot be disabled." default="false">false</anonymize_user_data>
-            <anonymization_salt type="uint" desc="The salt used to anonymize/obfuscate user-data in logs. Use a secret 64-bit random number." default="82589933">82589933</anonymization_salt>
-        </anonymize>
-    </logging>
-
-    <loleaflet_logging desc="Logging in the browser console" default="false">false</loleaflet_logging>
-
-    <trace desc="Dump commands and notifications for replay. When 'snapshot' is true, the source file is copied to the path first." enable="false">
-        <path desc="Output path to hold trace file and docs. Use '%' for timestamp to avoid overwriting. For example: /some/path/to/looltrace-%.gz" compress="true" snapshot="false"></path>
-        <filter>
-            <message desc="Regex pattern of messages to exclude"></message>
-        </filter>
-        <outgoing>
-            <record desc="Whether or not to record outgoing messages" default="false">false</record>
-        </outgoing>
-    </trace>
-
-    <net desc="Network settings">
-      <!-- On systems where localhost resolves to IPv6 [::1] address first, when net.proto is all and net.listen is loopback, loolwsd unexpectedly listens on [::1] only.
-           You need to change net.proto to IPv4, if you want to use 127.0.0.1. -->
-      <proto type="string" default="all" desc="Protocol to use IPv4, IPv6 or all for both">all</proto>
-      <listen type="string" default="any" desc="Listen address that loolwsd binds to. Can be 'any' or 'loopback'.">any</listen>
-      <service_root type="path" default="" desc="Prefix all the pages, websockets, etc. with this path."></service_root>
-      <proxy_prefix type="bool" default="false" desc="Enable a ProxyPrefix to be passed int through which to redirect requests"></proxy_prefix>
-      <post_allow desc="Allow/deny client IP address for POST(REST)." allow="true">
-        <host desc="The IPv4 private 192.168 block as plain IPv4 dotted decimal addresses.">192\.168\.[0-9]{1,3}\.[0-9]{1,3}</host>
-        <host desc="Ditto, but as IPv4-mapped IPv6 addresses">::ffff:192\.168\.[0-9]{1,3}\.[0-9]{1,3}</host>
-        <host desc="The IPv4 loopback (localhost) address.">127\.0\.0\.1</host>
-        <host desc="Ditto, but as IPv4-mapped IPv6 address">::ffff:127\.0\.0\.1</host>
-        <host desc="The IPv6 loopback (localhost) address.">::1</host>
-        <host desc="The IPv4 private 172.17.0.0/16 subnet (Docker).">172\.17\.[0-9]{1,3}\.[0-9]{1,3}</host>
-        <host desc="Ditto, but as IPv4-mapped IPv6 addresses">::ffff:172\.17\.[0-9]{1,3}\.[0-9]{1,3}</host>
-      </post_allow>
-      <frame_ancestors desc="Specify who is allowed to embed the LO Online iframe (loolwsd and WOPI host are always allowed). Separate multiple hosts by space.">cloud.oasis21.org</frame_ancestors>
-    </net>
-
-    <ssl desc="SSL settings">
-        <enable type="bool" desc="Controls whether SSL encryption between browser and loolwsd is enabled (do not disable for production deployment). If default is false, must first be compiled with SSL support to enable." default="true">true</enable>
-        <termination desc="Connection via proxy where loolwsd acts as working via https, but actually uses http." type="bool" default="true">true</termination>
-        <cert_file_path desc="Path to the cert file" relative="false">/etc/loolwsd/cert.pem</cert_file_path>
-        <key_file_path desc="Path to the key file" relative="false">/etc/loolwsd/key.pem</key_file_path>
-        <ca_file_path desc="Path to the ca file" relative="false">/etc/loolwsd/ca-chain.cert.pem</ca_file_path>
-        <cipher_list desc="List of OpenSSL ciphers to accept" default="ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"></cipher_list>
-        <hpkp desc="Enable HTTP Public key pinning" enable="false" report_only="false">
-            <max_age desc="HPKP's max-age directive - time in seconds browser should remember the pins" enable="true">1000</max_age>
-            <report_uri desc="HPKP's report-uri directive - pin validation failure are reported at this URL" enable="false"></report_uri>
-            <pins desc="Base64 encoded SPKI fingerprints of keys to be pinned">
-            <pin></pin>
-            </pins>
-        </hpkp>
-    </ssl>
-
-    <security desc="Altering these defaults potentially opens you to significant risk">
-      <seccomp desc="Should we use the seccomp system call filtering." type="bool" default="true">true</seccomp>
-      <capabilities desc="Should we require capabilities to isolate processes into chroot jails" type="bool" default="true">true</capabilities>
-    </security>
-
-    <watermark>
-      <opacity desc="Opacity of on-screen watermark from 0.0 to 1.0" type="double" default="0.2"></opacity>
-      <text desc="Watermark text to be displayed on the document if entered" type="string"></text>
-    </watermark>
-
-    <welcome>
-      <enable type="bool" desc="Controls whether the welcome screen should be shown to the users on new install and updates." default="false">false</enable>
-      <enable_button type="bool" desc="Controls whether the welcome screen should have an explanatory button instead of an X button to close the dialog." default="false">false</enable_button>
-      <path desc="Path to 'welcome-$lang.html' files served on first start or when the version changes. When empty, defaults to the Release notes." type="path" relative="true" default="loleaflet/welcome"></path>
-    </welcome>
-
-    <storage desc="Backend storage">
-        <filesystem allow="false" />
-        <wopi desc="Allow/deny wopi storage. Mutually exclusive with webdav." allow="true">
-            <host desc="Regex pattern of hostname to allow or deny." allow="true">cloud.oasis21.org</host>
-            <host desc="Regex pattern of hostname to allow or deny." allow="true">10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}</host>
-            <host desc="Regex pattern of hostname to allow or deny." allow="true">172\.1[6789]\.[0-9]{1,3}\.[0-9]{1,3}</host>
-            <host desc="Regex pattern of hostname to allow or deny." allow="true">172\.2[0-9]\.[0-9]{1,3}\.[0-9]{1,3}</host>
-            <host desc="Regex pattern of hostname to allow or deny." allow="true">172\.3[01]\.[0-9]{1,3}\.[0-9]{1,3}</host>
-            <host desc="Regex pattern of hostname to allow or deny." allow="true">192\.168\.[0-9]{1,3}\.[0-9]{1,3}</host>
-            <host desc="Regex pattern of hostname to allow or deny." allow="false">192\.168\.1\.1</host>
-            <max_file_size desc="Maximum document size in bytes to load. 0 for unlimited." type="uint">0</max_file_size>
-            <reuse_cookies desc="When enabled, cookies from the browser will be captured and set on WOPI requests." type="bool" default="false">false</reuse_cookies>
-            <locking desc="Locking settings">
-                <refresh desc="How frequently we should re-acquire a lock with the storage server, in seconds (default 15 mins) or 0 for no refresh" type="int" default="900">900</refresh>
-            </locking>
-        </wopi>
-        <webdav desc="Allow/deny webdav storage. Mutually exclusive with wopi." allow="false">
-            <host desc="Hostname to allow" allow="true">cloud.oasis21.org</host>
-        </webdav>
-        <ssl desc="SSL settings">
-	    <as_scheme type="bool" default="true" desc="When set we exclusively use the WOPI URI's scheme to enable SSL for storage">true</as_scheme>
-            <enable type="bool" desc="If as_scheme is false or not set, this can be set to force SSL encryption between storage and loolwsd. When empty this defaults to following the ssl.enable setting"></enable>
-            <cert_file_path desc="Path to the cert file" relative="false"></cert_file_path>
-            <key_file_path desc="Path to the key file" relative="false"></key_file_path>
-            <ca_file_path desc="Path to the ca file. If this is not empty, then SSL verification will be strict, otherwise cert of storage (WOPI-like host) will not be verified." relative="false"></ca_file_path>
-            <cipher_list desc="List of OpenSSL ciphers to accept. If empty the defaults are used. These can be overriden only if absolutely needed."></cipher_list>
-        </ssl>
-    </storage>
-
-    <tile_cache_persistent desc="Should the tiles persist between two editing sessions of the given document?" type="bool" default="true">true</tile_cache_persistent>
-
-    <admin_console desc="Web admin console settings.">
-        <enable desc="Enable the admin console functionality" type="bool" default="true">true</enable>
-        <enable_pam desc="Enable admin user authentication with PAM" type="bool" default="false">false</enable_pam>
-        <username desc="The username of the admin console. Ignored if PAM is enabled.">nextcloud</username>
-        <password desc="The password of the admin console. Deprecated on most platforms. Instead, use PAM or loolconfig to set up a secure password.">__COLLABORA__PASSWORD__</password>
-    </admin_console>
-
-    <monitors desc="Addresses of servers we connect to on start for monitoring">
-    </monitors>
-
-</config>
--- a/nextcloud/onlyoffice.tar.gz
+++ b/nextcloud/onlyoffice.tar.gz
--- a/nextcloud/secrets/librezo.secrets.example
+++ b/nextcloud/secrets/librezo.secrets.example
@@ -4,5 +4,3 @@ POSTGRES_USER=nc
 POSTGRES_HOST=nextcloud-db
 username=nextcloud
 password=__COLLABORA_PASSWORD__
-REDIS_PASSWORD=__REDIS_PASSWORD__
-REDIS_HOST_PASSWORD=$REDIS_PASSWORD
--- a/nextcloud/share.sql
+++ b/nextcloud/share.sql
@@ -0,0 +1,270 @@
+--
+-- PostgreSQL database dump
+--
+
+-- Dumped from database version 11.16 (Debian 11.16-1.pgdg90+1)
+-- Dumped by pg_dump version 11.16 (Debian 11.16-1.pgdg90+1)
+
+SET statement_timeout = 0;
+SET lock_timeout = 0;
+SET idle_in_transaction_session_timeout = 0;
+SET client_encoding = 'UTF8';
+SET standard_conforming_strings = on;
+SELECT pg_catalog.set_config('search_path', '', false);
+SET check_function_bodies = false;
+SET xmloption = content;
+SET client_min_messages = warning;
+SET row_security = off;
+
+SET default_tablespace = '';
+
+SET default_with_oids = false;
+
+--
+-- Name: oc_share; Type: TABLE; Schema: public; Owner: nc
+--
+
+CREATE TABLE public.oc_share (
+    id bigint NOT NULL,
+    share_type smallint DEFAULT 0 NOT NULL,
+    share_with character varying(255) DEFAULT NULL::character varying,
+    password character varying(255) DEFAULT NULL::character varying,
+    uid_owner character varying(64) DEFAULT ''::character varying NOT NULL,
+    uid_initiator character varying(64) DEFAULT NULL::character varying,
+    parent bigint,
+    item_type character varying(64) DEFAULT ''::character varying NOT NULL,
+    item_source character varying(255) DEFAULT NULL::character varying,
+    item_target character varying(255) DEFAULT NULL::character varying,
+    file_source bigint,
+    file_target character varying(512) DEFAULT NULL::character varying,
+    permissions smallint DEFAULT 0 NOT NULL,
+    stime bigint DEFAULT 0 NOT NULL,
+    accepted smallint DEFAULT 0 NOT NULL,
+    expiration timestamp(0) without time zone DEFAULT NULL::timestamp without time zone,
+    token character varying(32) DEFAULT NULL::character varying,
+    mail_send smallint DEFAULT 0 NOT NULL,
+    share_name character varying(64) DEFAULT NULL::character varying,
+    password_by_talk boolean DEFAULT false,
+    note text,
+    hide_download smallint DEFAULT 0,
+    label character varying(255) DEFAULT NULL::character varying
+);
+
+
+ALTER TABLE public.oc_share OWNER TO nc;
+
+--
+-- Name: oc_share_id_seq; Type: SEQUENCE; Schema: public; Owner: nc
+--
+
+CREATE SEQUENCE public.oc_share_id_seq
+    START WITH 1
+    INCREMENT BY 1
+    NO MINVALUE
+    NO MAXVALUE
+    CACHE 1;
+
+
+ALTER TABLE public.oc_share_id_seq OWNER TO nc;
+
+--
+-- Name: oc_share_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: nc
+--
+
+ALTER SEQUENCE public.oc_share_id_seq OWNED BY public.oc_share.id;
+
+
+--
+-- Name: oc_share id; Type: DEFAULT; Schema: public; Owner: nc
+--
+
+ALTER TABLE ONLY public.oc_share ALTER COLUMN id SET DEFAULT nextval('public.oc_share_id_seq'::regclass);
+
+
+--
+-- Data for Name: oc_share; Type: TABLE DATA; Schema: public; Owner: nc
+--
+
+COPY public.oc_share (id, share_type, share_with, password, uid_owner, uid_initiator, parent, item_type, item_source, item_target, file_source, file_target, permissions, stime, accepted, expiration, token, mail_send, share_name, password_by_talk, note, hide_download, label) FROM stdin;
+1	3	\N	\N	admin.local	admin.local	\N	file	1314	\N	1314	/Test feuille.xlsx	19	1644510958	0	\N	RiHyHyWRBw4qAQH	0	\N	f		0	
+2	3	\N	\N	admin.local	admin.local	\N	folder	2504	\N	2504	/Comité d'engagement	17	1648638034	0	\N	5AJWRE2aaqSJZrW	0	\N	f	\N	0	
+3	6	fredj@merlinsystem.com/nextcloud	\N	Frederic Jozon	Frederic Jozon	\N	folder	1342	\N	1342		31	1649147646	0	\N	ePDMGozFDzRfsrl	0	\N	f	\N	0	\N
+6	3	\N	\N	admin.local	admin.local	\N	folder	2761	\N	2761	/Comité d'engagement	17	1649753193	0	\N	cE3i7ngpnCkNiKG	0	\N	f	\N	0	
+8	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	13201	\N	13201	/Rencontres Oasis septembre 2022 - Modèle économique et tarification.ods	19	1649779159	0	\N	4KkdJRCcE3aZ3Qn	0	\N	f		0	
+7	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	13202	\N	13202	/Rencontres Oasis à Oasis du 22-24 septembre 2022 - modèle.odt	19	1649779067	0	\N	FK7jRfJQNDbkxzT	0	\N	f		0	
+9	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	16898	\N	16898	/Rencontres oasis à oasis 22-24 septembre - Rôles et redevabilités.ods	19	1649927426	0	\N	apsEJtEQsa9rxAz	0	\N	f		0	
+10	3	\N	\N	admin.local	admin.local	\N	file	22287	\N	22287	/Organisation Nextcloud - Coopérative Oasis.ods	19	1650448091	0	\N	5BokzgJBko3pFfx	0	\N	f		0	
+12	3	\N	\N	admin.local	admin.local	\N	file	22287	\N	22287	/Organisation Nextcloud - Coopérative Oasis.ods	17	1650448199	0	\N	DC3nRSCK4NWRNJT	0	\N	f	\N	0	
+13	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	23231	\N	23231	/Matrice lieux d'accueil 2021.ods	17	1650449222	0	\N	iK2Be9HPynaqwwL	0	\N	f	\N	0	
+14	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	23230	\N	23230	/Coop oasis - modèle économique Ramïn.ods	17	1650449289	0	\N	cPiqttifmYx72Hx	0	\N	f	\N	0	
+15	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	23453	\N	23453	/Cercle 0 - le Noyau.ods	17	1650449384	0	\N	GkcGngL43NgyZzq	0	\N	f	\N	0	
+16	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	23454	\N	23454	/Cercle 1 - Oasis à Oasis.ods	17	1650449409	0	\N	DociBAAsP3YkXCi	0	\N	f	\N	0	
+17	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	23450	\N	23450	/Coop Oasis - design webinaires et lettres OàO à partir de mai 2022.odt	17	1650449488	0	\N	QKbEkPZb7soGzR3	0	\N	f	\N	0	
+18	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	24699	\N	24699	/Rencontres 2022 - Est - Modèle économique et tarification.ods	17	1650554473	0	\N	ogPgApGFEyfgDJx	0	\N	f	\N	0	
+19	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	24911	\N	24911	/Rencontres 2022 - Est - Cadre général et programme.odt	19	1650555825	0	\N	eWMAG8MGC6zZHoD	0	\N	f		0	
+20	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	24894	\N	24894	/Rencontres 2022 - Est - Modèle économique et tarification.ods	17	1650555983	0	\N	DrzTjS6B4anTnTe	0	\N	f	\N	0	
+21	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	24898	\N	24898	/Rencontres 2022 - Sud - Modèle économique et tarification.ods	19	1650562138	0	\N	57mf2RGFELMpFdF	0	\N	f		0	
+22	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	24906	\N	24906	/Rencontres 2022 - Sud - Cadre général et programme.odt	19	1650562315	0	\N	8Toq2YgwA2Sn2Ni	0	\N	f		0	
+27	1	Coopérative Oasis	\N	Mathieu Labonne	Mathieu Labonne	\N	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	0	\N	\N	0	\N	f	\N	0	\N
+28	2	admin.local	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+29	2	Aurore Borowik	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+32	2	Fabrice Perez	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+33	2	Fabrice Tournier-Courtes	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+34	2	Frederic Jozon	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+35	2	Gabrielle Paoli	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+36	2	Ludovic Simon	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+37	2	Mathieu Labonne	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+39	2	Ramin Farhangi	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+40	3	\N	\N	Fabrice Perez	Fabrice Perez	\N	file	9867	\N	9867	/Cooperative-Oasis-Dossier-presse-juin-2021.pdf	17	1650966233	0	\N	oycXHPJz95Z85Mi	0	\N	f	\N	0	
+41	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	24753	\N	24753	/Rencontres 2022 - Est - Rôles et redevabilités.ods	17	1650975010	0	\N	pEFKH3e72GnkJeP	0	\N	f	\N	0	
+42	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	27471	\N	27471	/Rencontres 2022 - Ouest - Modèle économique et tarification.ods	19	1650986878	0	\N	FNYfwYTaqmZCymY	0	\N	f		0	
+43	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	27472	\N	27472	/Rencontres 2022 - Ouest - Rôles et redevabilités.ods	19	1650986902	0	\N	G5bbrtWEfFSyt89	0	\N	f		0	
+44	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	27473	\N	27473	/Rencontres 2022 - Ouest - Cadre général et programme.odt	19	1650986912	0	\N	R5foCAtH2wEbP8g	0	\N	f		0	
+45	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	23624	\N	23624	/Pad réunions d'équipe.md	19	1651002550	0	\N	yobqRirJwdxNQ4M	0	\N	f		0	
+47	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	29498	\N	29498	/Coop Oasis - organisation, rôles et redevabilités.ods	19	1651053500	0	\N	rLjcxCRFW6GywDn	0	\N	f		0	
+48	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	44086	\N	44086	/Curriculum Vitae du représentant légal de la Coopérative Oasis.pdf	17	1651151428	0	\N	mBgSj3n24ot6MoX	0	\N	f	\N	0	
+49	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56294	\N	56294	/Levées de fonds Coopérative Oasis.ods	17	1651502448	0	\N	BMHK8b2KjT9wR7Q	0	\N	f	\N	0	
+50	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56317	\N	56317	/Rapport Du commissaire aux comptes sur les comptes annuels _ exercice clos le 31 décembre 2020.pdf	17	1651502525	0	\N	3x7QodjTHetMQd6	0	\N	f	\N	0	
+51	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56318	\N	56318	/COOPERATIVE OASIS - Comptes annuels 31_12_2020.pdf	17	1651502612	0	\N	8t2iRz5bHqnceZY	0	\N	f	\N	0	
+52	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56310	\N	56310	/Échéancier de l’endettement sur 5 ans _ Coopérative Oasis.ods	17	1651502700	0	\N	XReCHP6DGN3boqY	0	\N	f	\N	0	
+53	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56295	\N	56295	/Prévisionnel d'activité _ Coopérative Oasis.ods	17	1651502753	0	\N	Lm4zfy3bcLz8yY5	0	\N	f	\N	0	
+54	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56309	\N	56309	/Curriculum Vitae du représentant légal de la Coopérative Oasis.pdf	17	1651502798	0	\N	cJeybXSe45ijqt8	0	\N	f	\N	0	
+55	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56354	\N	56354	/PV CA_Coop OASIS_2018_12_11.pdf	17	1651502911	0	\N	9qjbxAg6X5iCB7s	0	\N	f	\N	0	
+56	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56347	\N	56347	/Tableau de répartition de l'actionnariat _ Coopérative Oasis.ods	17	1651502967	0	\N	HjjTZwSEzA7xqtm	0	\N	f	\N	0	
+57	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56366	\N	56366	/Articles 17 et 20 des statuts de la SCIC SA COOPERATIVE OASIS.pdf	17	1651503040	0	\N	9bQwdrtxzr6WHn3	0	\N	f	\N	0	
+58	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56375	\N	56375	/Articles 12 et 15 des statuts de la SCIC SA COOPERATIVE OASIS.pdf	17	1651503104	0	\N	sEXQxRWWHaWEnHt	0	\N	f	\N	0	
+59	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56387	\N	56387	/Articles 8 et 11 des statuts de la SCIC SA COOPERATIVE OASIS.pdf	17	1651503166	0	\N	BMmNzxpNKsqBj74	0	\N	f	\N	0	
+60	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56388	\N	56388	/Bulletin-personne-physique.pdf	17	1651503271	0	\N	kG8Xd44MzzE4XjM	0	\N	f	\N	0	
+61	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56389	\N	56389	/Bulletin-personne-morale.pdf	17	1651503294	0	\N	cATQLYqiLSKxrLW	0	\N	f	\N	0	
+62	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	56596	\N	56596	/Tableau des congés.ods	17	1651514240	0	\N	z5y8GMyGfqg47se	0	\N	f	\N	0	
+63	3	\N	\N	Fabrice Perez	Fabrice Perez	\N	folder	13641	\N	13641	/Kit Com Oasis Convention	17	1651593789	0	\N	4RoPNQi4LtdBEWg	0	\N	f	\N	0	
+76	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	file	90674	\N	90674	/CAP SUR LES OASIS Communqué de lancement.odt	19	1652263931	0	\N	Q3xoozjSTnCasFp	0	\N	f		0	
+67	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	83251	\N	83251	/Comité stratégique 2022-05-06.odt	17	1651858176	0	\N	5XQ5ft26xMb35jf	0	\N	f	\N	0	
+69	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	83691	\N	83691	/COOPERATIVE OASIS - COMPTES ANNUELS_2021.pdf	17	1652168085	0	\N	MfQYqj7o9RZ3j2S	0	\N	f	\N	0	
+71	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	file	90259	\N	90259	/Cap sur les Oasis Dossier de présentation.pdf	17	1652261112	0	\N	zDWBmS4pxyFxBDb	0	\N	f	\N	0	
+72	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	file	90266	\N	90266	/Cap sur les Oasis du Sud-Ouest - Saison 1 - Bande-annonce.mp4	17	1652261177	0	\N	pytgTxtkmnEqNQc	0	\N	f	\N	0	
+73	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	folder	90495	\N	90495	/Bannières et titres	17	1652261644	0	\N	gKTkmFRsCksj2Qe	0	\N	f	\N	0	
+74	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	folder	90317	\N	90317	/Vignettes	17	1652261666	0	\N	fdmbaNRAKnHHfbt	0	\N	f	\N	0	
+75	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	folder	90318	\N	90318	/Photos	17	1652261677	0	\N	3bFd64fdH5CgCyQ	0	\N	f	\N	0	
+77	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	file	90255	\N	90255	/CAP SUR LES OASIS Kit de communication.odt	19	1652264032	0	\N	bTp4zkCQo2HXzBr	0	\N	f		0	
+78	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	90720	\N	90720	/Invités Rencontres 2022.ods	17	1652265835	0	\N	B2Q2e4qKm2sCiaP	0	\N	f	\N	0	
+79	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	folder	86204	\N	86204	/TERRE DE MILPA	17	1652290862	0	\N	CCY97ajdT5XQ26k	0	\N	f	\N	0	
+80	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	91288	\N	91288	/TDM_présentation_Ferme_des_Seignes.pdf	17	1652290928	0	\N	ANXpRJDtzDtWQ9i	0	\N	f	\N	0	
+70	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	folder	90253	\N	90253	/Kit Com Cap sur les oasis	17	1652261040	0	\N	ZZi7XzXJg6jpoR5	0	\N	f		0	
+81	3	\N	\N	Mathieu Labonne	Fabrice Perez	27	file	90260	\N	90260	/CAP SUR LES OASIS Calendrier de diffusion.jpg	17	1652789736	0	\N	FAfKtgHoyGA9JBC	0	\N	f	\N	0	
+83	3	\N	\N	serveur	serveur	\N	file	1314	\N	1314	/Test feuille.xlsx	17	1652968350	0	\N	ingaEtoE3gSZQFw	0	\N	f	\N	0	
+86	2	daphne_vialan	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+87	3	\N	\N	admin.local	admin.local	\N	file	166356	\N	166356	/Quartier circulaire.odt	17	1653038891	0	\N	Sdgd3f6YnYx8EAC	0	\N	f	\N	0	
+90	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	166448	\N	166448	/Suivi contacts Oasis (hors ou avant prêt).xlsx	17	1653300018	0	\N	5p8wFonaNPWds59	0	\N	f	\N	0	
+93	2	nathalie_boquien	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+94	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	177009	\N	177009	/Fiche de rôle Communication et inspiration.docx	17	1653413869	0	\N	StXYQ6QBffdRYTs	0	\N	f	\N	0	
+95	2	coralie_darsy	\N	Mathieu Labonne	Mathieu Labonne	27	folder	8954	\N	8954	/INSPIRATION DOCUMENTATION	31	1650965478	1	\N	\N	0	\N	f	\N	0	\N
+88	3	\N	\N	daphne_vialan	daphne_vialan	\N	file	25818	\N	25818	/Mandat Rôle Prendre soin de l'Humain.xlsx	17	1653147142	0	\N	zP7YxQPRjkR2nyH	0	\N	f		0	pour les oasis
+96	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	file	186155	\N	186155	/Fiche de rôle Communication et inspiration.pdf	17	1653998560	0	\N	i9G3RZECZoKfmXJ	0	\N	f	\N	0	
+97	3	\N	\N	daphne_vialan	daphne_vialan	\N	file	176905	\N	176905	/Coop Oasis - organisation, rôles et redevabilités.ods	17	1654028293	0	\N	mj75WDXG8GmSB3M	0	\N	f	\N	0	
+98	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	folder	183238	\N	183238	/Docs finaux pour Comité engagement - Petite Graine	17	1654201973	0	\N	3LnrDmeATnsGH2g	0	\N	f	\N	0	
+99	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	folder	183238	\N	183238	/Docs finaux pour Comité engagement - Petite Graine	17	1654201983	0	\N	kbNeASGgiBxoWEC	0	\N	f	\N	0	
+100	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	folder	23684	\N	23684	/Comite engagement	17	1654430328	0	\N	XjDKqknYNNjEFkt	0	\N	f	\N	0	
+101	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	195081	\N	195081	/Oasis de Kernours - Coop Oasis.ods	19	1654672970	0	\N	xAEjFqwoHAMNMPZ	0	\N	f		0	
+103	3	\N	\N	event	event	\N	file	196005	\N	196005	/Grille tarifaire OASIS 21.xlsx	17	1654776825	0	\N	i4F6BS2DMxtr6Dc	0	\N	f	\N	0	
+104	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	file	204819	\N	204819	/CR CE Petite graine.docx	19	1654786801	0	\N	2cq4o9ZGfzqeLpE	0	\N	f		0	
+105	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	file	18427	\N	18427	/Devis 2022-NB-6_PetiteGraine signé 8-04-2022.pdf	17	1655130350	0	\N	iqm6kPCXkFALJ7z	0	\N	f	\N	0	
+106	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	file	189055	\N	189055	/proposition de document cadre vie de lequipe.odt	17	1655214144	0	\N	HYAy9qaLffc5Sxb	0	\N	f	\N	0	
+107	3	\N	\N	Fabrice Perez	Fabrice Perez	\N	folder	13637	\N	13637	/RVB	17	1655245076	0	\N	pLdeMnpXKdLyecF	0	\N	f	\N	0	
+108	3	\N	\N	daphne_vialan	daphne_vialan	\N	file	246082	\N	246082	/remuneration proposition.odt	17	1655283100	0	\N	oSSsq5ocP2jtETp	0	\N	f	\N	0	
+109	10	pn8z9muv	\N	serveur	serveur	\N	file	2482	\N	2482	/{TALK_PLACEHOLDER}/Readme.md	19	1655803587	0	\N	RyLqXNn6piiT3Pc	0	\N	f	\N	0	\N
+110	11	transfert	\N	serveur	serveur	109	file	2482	\N	2482	/Readme.md	19	1655803587	0	\N	\N	0	\N	f	\N	0	\N
+111	10	k7sa78si	\N	serveur	serveur	\N	file	2404	\N	2404	/{TALK_PLACEHOLDER}/toto.ods	19	1655919198	0	\N	YmCHdAFWRidc9Ln	0	\N	f	\N	0	\N
+112	11	Anne Tavernier	\N	serveur	serveur	111	file	2404	\N	2404	/toto.ods	19	1655919198	0	\N	\N	0	\N	f	\N	0	\N
+113	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	folder	204432	\N	204432	/CE	17	1656100171	0	\N	BpnQoA58NnSo3KL	0	\N	f	\N	0	
+114	3	\N	\N	daphne_vialan	daphne_vialan	\N	file	259638	\N	259638	/ingrid leduc.md	17	1656485529	0	\N	tRDWkoGYNfcHN8A	0	\N	f	\N	0	
+115	3	\N	\N	Ramin Farhangi	Ramin Farhangi	\N	file	261546	\N	261546	/Extrait AG Coop Oasis - pages 5 à 9.pdf	17	1656502984	0	\N	QAMPnoHrmd5LjJZ	0	\N	f	\N	0	
+116	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	folder	261615	\N	261615	/Juin 2022_Photos Forge du Vallon	17	1656506802	0	\N	6cys6AgEmZ2LBb2	0	\N	f	\N	0	
+117	3	\N	\N	coralie_darsy	coralie_darsy	\N	file	259064	\N	259064	/Présentation WE Forge du Vallon.odp	17	1656649765	0	\N	R8J6izxYE2tbBt5	0	\N	f	\N	0	
+118	3	\N	\N	nathalie_boquien	nathalie_boquien	\N	file	264120	\N	264120	/CR CE Les Commun.es.docx	19	1656668815	0	\N	FadPpRdz5sTtiLY	0	\N	f		0	
+119	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	folder	25365	\N	25365	/LES COMMUN.E.S	17	1656697632	0	\N	65NMaGL3e96ArE9	0	\N	f	\N	0	
+120	3	\N	\N	Mathieu Labonne	Mathieu Labonne	\N	folder	204432	\N	204432	/CE	17	1656697825	0	\N	ArQ7EActTqHqKsC	0	\N	f	\N	0	
+121	3	\N	\N	Fabrice Perez	Fabrice Perez	\N	file	264464	\N	264464	/Audiences et bilan.ods	19	1656712578	0	\N	CPpmAAGgWcfC7eY	0	\N	f		0	
+122	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	71102	\N	71102	/oasis-infographie VDEF Horizontal 1 partie.pdf	17	1657114911	0	\N	48pZWYwfBNfYCEm	0	\N	f	\N	0	
+123	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	71099	\N	71099	/oasis-infographie VDEF Vertical 2 partie.pdf	17	1657115014	0	\N	kQCxJE7SzbY6FeC	0	\N	f	\N	0	
+124	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	9878	\N	9878	/Dossier-presse-juin-2021.pdf	17	1657115613	0	\N	z44Fxijz5K5CGR7	0	\N	f	\N	0	
+125	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	267540	\N	267540	/Pad ambassadeurs et ambassadrices.md	17	1657121026	0	\N	zkJ79jcy5xRLPq7	0	\N	f	\N	0	
+126	0	Tobias Ollive	\N	serveur	serveur	\N	file	268352	\N	268352	/test.odt	19	1657230654	1	\N	\N	0	\N	f	\N	0	\N
+127	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	277937	\N	277937	/oasis-infographie VDEF Horizontal 1 partie.pdf	17	1657535403	0	\N	5zNYy6BSa5cmNsK	0	\N	f	\N	0	
+128	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	277939	\N	277939	/oasis-infographie VDEF Vertical 2 partie.pdf	17	1657535436	0	\N	EgsXDSNyDbQzQbm	0	\N	f	\N	0	
+129	3	\N	\N	Aurore Borowik	Aurore Borowik	\N	file	278048	\N	278048	/Dossier-presse-juin-2021.pdf	17	1657535549	0	\N	MwXJyAfqi7Z4E6A	0	\N	f	\N	0	
+132	3	\N	\N	serveur	serveur	\N	file	269160	\N	269160	/Nextcloud flyer.pdf	17	1657618310	0	\N	MddLc7CoPxZK2Bc	0	\N	f	\N	0	
+133	3	\N	\N	serveur	serveur	\N	file	269164	\N	269164	/Welcome to Nextcloud Hub.docx	17	1657618326	0	\N	ACkXB5RDqzDCnFJ	0	\N	f	\N	0	
+131	3	\N	\N	serveur	serveur	\N	file	376132	\N	376132	/encore.odt	17	1657618225	0	\N	encoreunfois	0	\N	f		0	
+135	3	\N	\N	serveur	serveur	\N	file	269116	\N	269116	/Readme.md	17	1657620978	0	\N	xAb4Kiyxq2sfrNQ	0	\N	f	\N	0	
+\.
+
+
+--
+-- Name: oc_share_id_seq; Type: SEQUENCE SET; Schema: public; Owner: nc
+--
+
+SELECT pg_catalog.setval('public.oc_share_id_seq', 135, true);
+
+
+--
+-- Name: oc_share oc_share_pkey; Type: CONSTRAINT; Schema: public; Owner: nc
+--
+
+ALTER TABLE ONLY public.oc_share
+    ADD CONSTRAINT oc_share_pkey PRIMARY KEY (id);
+
+
+--
+-- Name: file_source_index; Type: INDEX; Schema: public; Owner: nc
+--
+
+CREATE INDEX file_source_index ON public.oc_share USING btree (file_source);
+
+
+--
+-- Name: initiator_index; Type: INDEX; Schema: public; Owner: nc
+--
+
+CREATE INDEX initiator_index ON public.oc_share USING btree (uid_initiator);
+
+
+--
+-- Name: item_share_type_index; Type: INDEX; Schema: public; Owner: nc
+--
+
+CREATE INDEX item_share_type_index ON public.oc_share USING btree (item_type, share_type);
+
+
+--
+-- Name: owner_index; Type: INDEX; Schema: public; Owner: nc
+--
+
+CREATE INDEX owner_index ON public.oc_share USING btree (uid_owner);
+
+
+--
+-- Name: parent_index; Type: INDEX; Schema: public; Owner: nc
+--
+
+CREATE INDEX parent_index ON public.oc_share USING btree (parent);
+
+
+--
+-- Name: share_with_index; Type: INDEX; Schema: public; Owner: nc
+--
+
+CREATE INDEX share_with_index ON public.oc_share USING btree (share_with);
+
+
+--
+-- Name: token_index; Type: INDEX; Schema: public; Owner: nc
+--
+
+CREATE INDEX token_index ON public.oc_share USING btree (token);
+
+
+--
+-- PostgreSQL database dump complete
+--
+
--- a/nextcloud/supervisord.conf
+++ b/nextcloud/supervisord.conf
@@ -0,0 +1,22 @@
+[supervisord]
+nodaemon=true
+logfile=/var/log/supervisord/supervisord.log
+pidfile=/var/run/supervisord/supervisord.pid
+childlogdir=/var/log/supervisord/
+logfile_maxbytes=50MB                           ; maximum size of logfile before rotation
+logfile_backups=10                              ; number of backed up logfiles
+loglevel=error
+
+[program:apache2]
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+command=apache2-foreground
+
+[program:cron]
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+command=/cron.sh
--- a/traefik/docker-compose.yml
+++ b/traefik/docker-compose.yml
@@ -6,7 +6,7 @@ networks:

 services:
  traefik:
-    image: traefik:2.5
+    image: traefik:2.10.7
    container_name: traefik
    ports:
      - 80:80
--- a/traefik/traefik_dynamic.toml
+++ b/traefik/traefik_dynamic.toml
@@ -18,7 +18,7 @@
    frameDeny = true
    stsIncludeSubdomains = true
    stsPreload = true
-    customFrameOptionsValue = "SAMEORIGIN"
+    customFrameOptionsValue = "ALLOW-FROM https://odoo.cooperative-oasis.org https://cloud.oasis21.org"
    referrerPolicy = "same-origin"
    permissionsPolicy = "vibrate='self'"
    stsSeconds = 315360000
@@ -27,8 +27,28 @@
    excludedContentTypes = ["text/event-stream"]

  [http.middlewares.allowFrameAndCORS.headers]
-    contentSecurityPolicy = "frame-ancestors *"
+    customFrameOptionsValue = "ALLOW-FROM https://code.oasis21.org https://odoo.cooperative-oasis.org"
+    contentSecurityPolicy = "frame-ancestors * cloud.oasis21.org https://odoo.cooperative-oasis.org"
    accessControlAllowHeaders = ["*"]
    accessControlAllowMethods = ["GET", "POST", "OPTIONS"]
    accessControlAllowOriginList = ["*"]
    accessControlExposeHeaders = ["*"]
+
+  [http.routers]
+    [http.routers.coopoasis]
+      entrypoints = "websecure"
+      rule = "Host(`odoo.cooperative-oasis.org`) || Host(`pad.cooperative-oasis.org`) || Host(`odoo-dev.cooperative-oasis.org`) || Host(`test-odoo.cooperative-oasis.org`)"
+      service = "coopoasis"
+    [http.routers.papercut]
+      entrypoints = "websecure"
+      rule = "Host(`papercut.oasis21.org`)"
+      service = "papercut"
+
+  [http.services]
+    [http.services.coopoasis.loadBalancer]
+      [[http.services.coopoasis.loadBalancer.servers]]
+        url = "http://172.16.7.12/"
+    [http.services.papercut.loadBalancer]
+      [[http.services.papercut.loadBalancer.servers]]
+        url = "http://172.16.7.13:9191/"
+
Author	SHA1	Message	Date
root	fc2b45ad16	update nextcloud version	2024-02-16 22:32:36 +01:00
root	13c55a9f43	add odoo-dev	2024-02-16 22:31:45 +01:00
root	138591839e	fix wrong name	2024-02-16 22:31:11 +01:00
root	9420f6875e	add restic config	2024-01-20 21:02:38 +01:00
root	0715bdafd4	add backup db.sh	2024-01-20 08:49:11 +01:00
root	c2907b543a	add papercut config	2024-01-20 08:48:05 +01:00
root	21491b9ebc	update traefik	2024-01-18 23:29:18 +01:00
root	31ed45b81d	update nextcloud and oo version	2024-01-18 23:24:14 +01:00
root	8ce6a85f6a	update version	2023-09-21 15:54:21 +02:00
root	e52e1b52ab	update to version 2.10	2023-06-29 10:48:27 +02:00
root	5046b4fcbc	update postgres version	2023-03-27 22:07:56 +02:00
oiseauroch	9da2d870f4	upgrade stack è	2023-03-27 20:26:31 +02:00
root	b4e53d0523	sev user limit to 1000	2022-12-29 23:15:22 +01:00
root	9a829d0ffb	update nextcloud 24.0.8	2022-12-29 23:14:54 +01:00
root	791bfa1a59	update version 23.0.11	2022-12-29 22:20:48 +01:00
root	176017a569	add test-odoo domain	2022-12-29 22:09:22 +01:00
root	579b7cbb61	fix ip address	2022-12-19 12:55:13 +01:00
root	2f10fdbce6	add host pad.cooperative-oasis.org to myceliandre VM	2022-12-19 12:53:08 +01:00
root	bb9d6b1967	enable forcesave	2022-12-19 12:53:08 +01:00
ppom	8431eb0809	Gitea test (sry)	2022-11-24 11:48:00 +01:00
root	98d5bb68e6	update traefik to version 2.9.7	2022-11-10 09:50:58 +01:00
root	7e5f5fb6fb	apply post-mortem 6 november policies	2022-11-09 13:24:10 +01:00
root	83d044d1b7	restart directives fix	2022-11-08 10:16:45 +01:00
root	e49675de6b	- update to version 23.0.11 - remove collabora from docker-compose.yml - add restart policy for redis - add odoo.cooperative-oasis.org as allow from	2022-11-06 12:30:46 +01:00
root	9feb8f9f2b	use locally build version of onlyoffice	2022-10-05 21:01:19 +02:00
root	9d4a330a52	change hostname for odoo VM	2022-10-04 11:08:44 +02:00
ppom	53633e1373	[traefik] ajout proxying coopoasis.oasis21.org	2022-09-23 14:41:28 +02:00
root	656744bdf8	use onlyoffice instead of collabora	2022-09-14 01:04:20 +02:00
root	ace9ab6887	Maj nextcloud + fix cors	2022-09-13 19:50:02 +02:00
oiseauroch	7d8bb7ae4e	update to 23.0.9	2022-09-11 13:28:53 +02:00
root	d54d279570	working install of oasis21 infra	2022-07-13 14:58:11 +02:00
Tobias Ollive	e53a26bd2e	improve readme	2022-05-06 12:10:23 +02:00
Tobias Ollive	a38983072f	improve doc	2022-05-06 09:54:27 +02:00
serveur	c4ae96976a	remove comment and redis password	2022-05-06 07:53:39 +00:00