Compare commits
1
Commits
master
..
d31846f77c
| Author | SHA1 | Date | |
|---|---|---|---|
 librezo
|
d31846f77c |
@@ -1,2 +0,0 @@
|
|||||||
.autorestic.env
|
|
||||||
.autorestic.lock.yml
|
|
||||||
@@ -1,99 +0,0 @@
|
|||||||
# Installation de l'infrastructure
|
|
||||||
|
|
||||||
### Lancement
|
|
||||||
|
|
||||||
#### Certs
|
|
||||||
|
|
||||||
Au premier lancement, assurez-vous que :
|
|
||||||
|
|
||||||
- Le dossier `/DATA/docker/traefik/certs` existe
|
|
||||||
- Créez un fichier `acme.json` à l'intérieur
|
|
||||||
- Changez son propriétaire à `root`
|
|
||||||
- Changez ses permissions à `600`
|
|
||||||
|
|
||||||
C'est dans ce fichier que seront conservés tous les certificats générés par Traefik.
|
|
||||||
|
|
||||||
### Migration des données
|
|
||||||
|
|
||||||
1. Mettre nextcloud en mode maintenance :
|
|
||||||
```
|
|
||||||
sudo -u www-data php occ maintenance:mode --on
|
|
||||||
```
|
|
||||||
2. Faire un dump de la bdd
|
|
||||||
```
|
|
||||||
sudo -u postgres pg_dump -Fc nc > nc.dump
|
|
||||||
```
|
|
||||||
3. Sauver les données du dossier nextcloud
|
|
||||||
```
|
|
||||||
mkdir -p /var/lib/backuppc/migration/data
|
|
||||||
cp -r /srv/nextcloud/ /var/lib/backuppc/migration/data
|
|
||||||
```
|
|
||||||
4. Sauver le fichier de configuration de nextcloud
|
|
||||||
```
|
|
||||||
cp /var/www/nextcloud/public_html/config/config.php /var/lib/backuppc/migration
|
|
||||||
```
|
|
||||||
|
|
||||||
…
|
|
||||||
installation de proxmox, vm, docker.
|
|
||||||
…
|
|
||||||
|
|
||||||
### Installation des services
|
|
||||||
|
|
||||||
1. Cloner le repo de l'infra et le mettre au bon endroit
|
|
||||||
```
|
|
||||||
git clone https://yuno.oiseauroch.fr/gitea/tobias/infra-oasis21.git
|
|
||||||
mkdir -p /DATA/docker
|
|
||||||
mv infra_oasis21 /DATA/docker/services
|
|
||||||
```
|
|
||||||
2. copy file `config.php` and change values
|
|
||||||
```
|
|
||||||
cp /var/lib/backuppc/migration/config.php .
|
|
||||||
# change host for redis
|
|
||||||
sed -i 's#/run/redis/redis.sock#redis#' config.php
|
|
||||||
# change dbhost
|
|
||||||
sed -i 's#localhost#nextcloud-db#' config.php
|
|
||||||
# change datadirectory
|
|
||||||
sed -i 's#/srv/nextcloud#/var/www/html/data#' config.php
|
|
||||||
|
|
||||||
```
|
|
||||||
3. Move `secrets/librezo.secrets.example` to `secrets/librezo.secrets`
|
|
||||||
4.Replace **nextcloud** and **collabora** password from vaultwarden
|
|
||||||
```
|
|
||||||
sed -i 's/__POSTGRES_PASSWORD__/nextcloudstrongpassword/g' config.php secrets/librezo.secrets
|
|
||||||
sed -i 's/__COLLABORA_PASSWORD__/collaborastrongpassword/g' config.php secrets/librezo.secrets
|
|
||||||
```
|
|
||||||
|
|
||||||
4. Start traefik
|
|
||||||
```
|
|
||||||
cd traefik
|
|
||||||
docker-compose up -d
|
|
||||||
```
|
|
||||||
5. Create docker containers and volume
|
|
||||||
```
|
|
||||||
docker-compose up --no-start
|
|
||||||
```
|
|
||||||
6. Import database
|
|
||||||
```
|
|
||||||
docker cp nc.dump nextcloud-db:/nc.dmp
|
|
||||||
docker-compose up -d nextcloud-db
|
|
||||||
docker-compose exec nextcloud-db sh -c "pg_restore -d nc -U nc nc.dmp"
|
|
||||||
docker-compose exec nextcloud-db rm /nc.dmp
|
|
||||||
```
|
|
||||||
7. Copy files and set correct rights
|
|
||||||
```
|
|
||||||
docker cp /var/lib/backuppc/migration/data nextcloud-app:/var/www/html/
|
|
||||||
cp config.php nextcloud-app:/var/www/html/config/config.php
|
|
||||||
docker-compose up -d nextcloud-app
|
|
||||||
docker-compose exec nextcloud-app chown -R www-data:www-data /var/www/html/data
|
|
||||||
docker-compose exec nextcloud-app chown -R www-data:www-data /var/www/html/config/config.php
|
|
||||||
```
|
|
||||||
8. restart docker-compose
|
|
||||||
```
|
|
||||||
docker-compose restart
|
|
||||||
```
|
|
||||||
|
|
||||||
### Configure collabora <!--onlyoffice?-->
|
|
||||||
1. connect to nextcloud
|
|
||||||
2. go to paramètres->nextcloud office-> utiliser mon propre serveur
|
|
||||||
3. choisir `code.oasis21.org`, décocher l'option `ne pas vérifier le certificat`
|
|
||||||
4. désinstaller l'application collabora built-in serveur
|
|
||||||
@@ -1,81 +0,0 @@
|
|||||||
version: 2
|
|
||||||
|
|
||||||
|
|
||||||
global:
|
|
||||||
forget:
|
|
||||||
keep-hourly: 24
|
|
||||||
keep-daily: 7
|
|
||||||
keep-weekly: 4
|
|
||||||
keep-monthly: 12
|
|
||||||
|
|
||||||
backends:
|
|
||||||
fch:
|
|
||||||
type: sftp
|
|
||||||
path: FCH_serveur:backups/
|
|
||||||
|
|
||||||
locations:
|
|
||||||
nextcloud_data:
|
|
||||||
from:
|
|
||||||
- /var/lib/docker/volumes/docker_nextcloud
|
|
||||||
to:
|
|
||||||
- fch
|
|
||||||
cron: 0 0 * * *
|
|
||||||
forget: prune
|
|
||||||
|
|
||||||
|
|
||||||
nextcloud_conf:
|
|
||||||
from:
|
|
||||||
- /var/lib/docker/volumes/docker_nextcloud-conf
|
|
||||||
to:
|
|
||||||
- fch
|
|
||||||
cron: 0 0 * * *
|
|
||||||
forget: prune
|
|
||||||
|
|
||||||
nextcloud_data:
|
|
||||||
from:
|
|
||||||
- /var/lib/docker/volumes/docker_nextcloud
|
|
||||||
to:
|
|
||||||
- fch
|
|
||||||
cron: 0 0 * * *
|
|
||||||
forget: prune
|
|
||||||
|
|
||||||
nextcloud_db:
|
|
||||||
from:
|
|
||||||
- /DATA/dump_bdd/nextcloud-db
|
|
||||||
to:
|
|
||||||
- fch
|
|
||||||
cron: 0 0 * * *
|
|
||||||
forget: prune
|
|
||||||
hooks:
|
|
||||||
before:
|
|
||||||
- /DATA/docker/services/backups/backup_db.sh nextcloud-db postgresql
|
|
||||||
|
|
||||||
onlyoffice:
|
|
||||||
from:
|
|
||||||
- /var/lib/docker/volumes/docker_onlyoffice-cache
|
|
||||||
- /var/lib/docker/volumes/docker_onlyoffice-data
|
|
||||||
to:
|
|
||||||
- fch
|
|
||||||
cron: 0 0 * * *
|
|
||||||
forget: prune
|
|
||||||
|
|
||||||
traefik-certs:
|
|
||||||
from:
|
|
||||||
- /DATA/docker/services/certs
|
|
||||||
to:
|
|
||||||
- fch
|
|
||||||
cron: 0 0 * * *
|
|
||||||
forget: prune
|
|
||||||
|
|
||||||
repos:
|
|
||||||
from:
|
|
||||||
- /DATA/docker/services/
|
|
||||||
to:
|
|
||||||
- fch
|
|
||||||
options:
|
|
||||||
backup:
|
|
||||||
exclude:
|
|
||||||
- '.git'
|
|
||||||
cron: 0 0 * * *
|
|
||||||
forget: prune
|
|
||||||
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
[Unit]
|
|
||||||
Description=Backups yay
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=oneshot
|
|
||||||
ExecStart=autorestic -c /DATA/docker/services/backups/.autorestic.yml --ci cron
|
|
||||||
# fail if backup takes more than 1 day
|
|
||||||
TimeoutStartSec=86400
|
|
||||||
IPAccounting=yes
|
|
||||||
MemoryAccounting=yes
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
[Unit]
|
|
||||||
Description=Backups yay
|
|
||||||
|
|
||||||
[Timer]
|
|
||||||
# Trigger every 10 minutes
|
|
||||||
OnCalendar=*:0/10:0
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=timers.target
|
|
||||||
@@ -1,61 +0,0 @@
|
|||||||
#!/usr/bin/env bash
|
|
||||||
|
|
||||||
# usage: <script> <container-name> <database-type>
|
|
||||||
#
|
|
||||||
# exports the database of a running docker container in a dump in $BACKUP_DIR/$CONTAINER_NAME/
|
|
||||||
|
|
||||||
BACKUP_DIR=/DATA/dump_bdd/
|
|
||||||
|
|
||||||
# Check container existence
|
|
||||||
|
|
||||||
CONTAINER="$1"
|
|
||||||
|
|
||||||
if ! docker ps | grep -q "$CONTAINER"
|
|
||||||
then
|
|
||||||
echo "The container $CONTAINER doesn't exist or doesn't run"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Check database type
|
|
||||||
|
|
||||||
TYPE="$2"
|
|
||||||
|
|
||||||
COMMAND=""
|
|
||||||
|
|
||||||
case "$TYPE" in
|
|
||||||
postgresql)
|
|
||||||
POSTGRES_USER=$(docker exec "$CONTAINER" env | grep POSTGRES_USER | cut -d= -f2)
|
|
||||||
COMMAND="pg_dumpall -c -U $POSTGRES_USER"
|
|
||||||
EXTENSION=sql
|
|
||||||
;;
|
|
||||||
mariadb)
|
|
||||||
MARIADB_USER=$(docker exec "$CONTAINER" env | grep MYSQL_USER | cut -d= -f2)
|
|
||||||
MARIADB_PASSWORD=$(docker exec "$CONTAINER" env | grep MYSQL_PASSWORD | cut -d= -f2)
|
|
||||||
COMMAND="mariadb-dump -u $MARIADB_USER --password=$MARIADB_PASSWORD --all-databases"
|
|
||||||
EXTENSION=sql
|
|
||||||
;;
|
|
||||||
mongodb)
|
|
||||||
COMMAND="mongodump --archive"
|
|
||||||
EXTENSION=mongodump
|
|
||||||
;;
|
|
||||||
ldap-config)
|
|
||||||
COMMAND="slapcat -n 0"
|
|
||||||
EXTENSION=config.ldif
|
|
||||||
;;
|
|
||||||
ldap-content)
|
|
||||||
COMMAND="slapcat -n 1"
|
|
||||||
EXTENSION=content.ldif
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
echo "I don't know $TYPE database type."
|
|
||||||
exit 1
|
|
||||||
esac
|
|
||||||
|
|
||||||
# Ensure directory exists
|
|
||||||
|
|
||||||
mkdir -p "$BACKUP_DIR/$CONTAINER"
|
|
||||||
|
|
||||||
# Export database
|
|
||||||
|
|
||||||
docker exec "$CONTAINER" $COMMAND > "$BACKUP_DIR/$CONTAINER/dump.$EXTENSION"
|
|
||||||
exit $?
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
docker exec nextcloud-db pg_dumpall -U nc > /DATA/dump_bdd/nextcloud.sql
|
|
||||||
Submodule
+1
Submodule nextcloud-pica added at c56205576e
@@ -1,3 +0,0 @@
|
|||||||
*.secrets
|
|
||||||
.env
|
|
||||||
config.php
|
|
||||||
@@ -1,103 +0,0 @@
|
|||||||
version: '3.7'
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
nextcloud-db:
|
|
||||||
name: docker_nextcloud-db-15
|
|
||||||
nextcloud-data:
|
|
||||||
name: docker_nextcloud
|
|
||||||
nextcloud:
|
|
||||||
name: docker_nextcloud-conf
|
|
||||||
onlyoffice-cache:
|
|
||||||
name: docker_onlyoffice-cache
|
|
||||||
onlyoffice-db:
|
|
||||||
name: docker_onlyoffice-db
|
|
||||||
|
|
||||||
networks:
|
|
||||||
nextcloud:
|
|
||||||
proxy:
|
|
||||||
external: true
|
|
||||||
|
|
||||||
services:
|
|
||||||
nextcloud-app:
|
|
||||||
image: nextcloud-cron:26.0.11
|
|
||||||
build: .
|
|
||||||
container_name: nextcloud-app
|
|
||||||
restart: unless-stopped
|
|
||||||
extra_hosts :
|
|
||||||
office.oasis21.org : 172.16.7.10
|
|
||||||
volumes:
|
|
||||||
- nextcloud:/var/www/html
|
|
||||||
- nextcloud-data:/var/www/html/data
|
|
||||||
environment:
|
|
||||||
- "TZ=Europe/Paris"
|
|
||||||
- REDIS_HOST=redis
|
|
||||||
env_file: ./secrets/librezo.secrets
|
|
||||||
depends_on:
|
|
||||||
- nextcloud-db
|
|
||||||
- redis
|
|
||||||
networks:
|
|
||||||
- nextcloud
|
|
||||||
- proxy
|
|
||||||
labels:
|
|
||||||
traefik.http.routers.nextcloud-web.entrypoints: websecure
|
|
||||||
traefik.http.routers.nextcloud-web.rule: Host(`cloud.oasis21.org`)
|
|
||||||
traefik.http.services.nextcloud-web.loadbalancer.server.port: 80
|
|
||||||
traefik.enable: true
|
|
||||||
# https://docs.nextcloud.com/server/16/admin_manual/configuration_server/reverse_proxy_configuration.html
|
|
||||||
traefik.http.routers.nextcloud-web.middlewares: nextcloud-web@docker, allowFrameAndCORS@file
|
|
||||||
traefik.http.middlewares.nextcloud-web.redirectregex.permanent: true
|
|
||||||
traefik.http.middlewares.nextcloud-web.redirectregex.regex: "https://(.*)/.well-known/(card|cal)dav"
|
|
||||||
traefik.http.middlewares.nextcloud-web.redirectregex.replacement: "https://$${1}/remote.php/dav/"
|
|
||||||
|
|
||||||
redis:
|
|
||||||
image: 'bitnami/redis:7.0.10'
|
|
||||||
container_name: redis
|
|
||||||
restart: unless-stopped
|
|
||||||
environment:
|
|
||||||
- "TZ=Europe/Paris"
|
|
||||||
- ALLOW_EMPTY_PASSWORD=yes
|
|
||||||
env_file: ./secrets/librezo.secrets
|
|
||||||
networks:
|
|
||||||
- nextcloud
|
|
||||||
|
|
||||||
|
|
||||||
nextcloud-db:
|
|
||||||
image: postgres:15-alpine
|
|
||||||
container_name: nextcloud-db
|
|
||||||
volumes:
|
|
||||||
- nextcloud-db:/var/lib/postgresql/data
|
|
||||||
networks:
|
|
||||||
- nextcloud
|
|
||||||
env_file: ./secrets/librezo.secrets
|
|
||||||
environment:
|
|
||||||
- "TZ=Europe/Paris"
|
|
||||||
restart: unless-stopped
|
|
||||||
|
|
||||||
onlyoffice:
|
|
||||||
build:
|
|
||||||
context: .
|
|
||||||
dockerfile: ./dockerfile-oo
|
|
||||||
container_name: onlyoffice
|
|
||||||
image: onlyoffice:7.5.1
|
|
||||||
restart: unless-stopped
|
|
||||||
extra_hosts :
|
|
||||||
cloud.oasis21.org : 172.16.7.10
|
|
||||||
environment:
|
|
||||||
- JWT_ENABLED=true
|
|
||||||
- JWT_SECRET=MvaG9zdHMgCnN1ZG8gbmFubyAvZXRjL2hvc3RzIApzY3AgVMOpbMOpY
|
|
||||||
- FORCESAVE_ENABLE=true
|
|
||||||
- FORCESAVE_INTERVAL=2m
|
|
||||||
- FORCESAVE_STEP=5m
|
|
||||||
volumes:
|
|
||||||
- onlyoffice-cache:/var/lib/onlyoffice/documentserver/App_Data
|
|
||||||
- onlyoffice-db:/var/lib/postgresql
|
|
||||||
labels:
|
|
||||||
traefik.http.routers.onlyoffice.entrypoints: websecure
|
|
||||||
traefik.http.routers.onlyoffice.rule: Host(`office.oasis21.org`)
|
|
||||||
traefik.http.services.onlyoffice.loadbalancer.server.port: 80
|
|
||||||
traefik.enable: true
|
|
||||||
traefik.http.routers.onlyoffice.middlewares: allowFrameAndCORS@file, onlyoffice-sslheaders
|
|
||||||
traefik.http.middlewares.onlyoffice-sslheaders.headers.customrequestheaders.X-Forwarded-Proto: "https"
|
|
||||||
networks:
|
|
||||||
- nextcloud
|
|
||||||
- proxy
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
FROM nextcloud:26.0.11-apache
|
|
||||||
|
|
||||||
ARG VERSION
|
|
||||||
|
|
||||||
RUN apt-get update && apt-get install -y \
|
|
||||||
supervisor \
|
|
||||||
libmagickcore-6.q16-6-extra \
|
|
||||||
&& rm -rf /var/lib/apt/lists/* \
|
|
||||||
&& mkdir /var/log/supervisord /var/run/supervisord
|
|
||||||
|
|
||||||
COPY supervisord.conf /
|
|
||||||
|
|
||||||
ENV NEXTCLOUD_UPDATE=1
|
|
||||||
|
|
||||||
CMD ["/usr/bin/supervisord", "-c", "/supervisord.conf"]
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
FROM thomisus/onlyoffice-documentserver-unlimited:7.5.1
|
|
||||||
|
|
||||||
ARG VERSION
|
|
||||||
|
|
||||||
RUN sed -i '27i FORCESAVE_ENABLE=${FORCESAVE_ENABLE:-false}\nFORCESAVE_INTERVAL=${FORCESAVE_INTERVAL:-5m}\nFORCESAVE_STEP=${FORCESAVE_STEP:-1m}\n' /app/ds/run-document-server.sh
|
|
||||||
RUN sed -i '340i ${JSON} -I -e "if(this.services.CoAuthoring.autoAssembly===undefined)this.services.CoAuthoring.autoAssembly={};"' /app/ds/run-document-server.sh
|
|
||||||
RUN sed -i '341i ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.enable = ${FORCESAVE_ENABLE}"' /app/ds/run-document-server.sh
|
|
||||||
RUN sed -i '342i ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.interval = \x27${FORCESAVE_INTERVAL}\x27"' /app/ds/run-document-server.sh
|
|
||||||
RUN sed -i '343i ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.step = \x27${FORCESAVE_STEP}\x27"\n' /app/ds/run-document-server.sh
|
|
||||||
Binary file not shown.
@@ -1,6 +0,0 @@
|
|||||||
POSTGRES_PASSWORD=__POSTGRES_PASSWORD__
|
|
||||||
POSTGRES_DB=nc
|
|
||||||
POSTGRES_USER=nc
|
|
||||||
POSTGRES_HOST=nextcloud-db
|
|
||||||
username=nextcloud
|
|
||||||
password=__COLLABORA_PASSWORD__
|
|
||||||
@@ -1,270 +0,0 @@
|
|||||||
--
|
|
||||||
-- PostgreSQL database dump
|
|
||||||
--
|
|
||||||
|
|
||||||
-- Dumped from database version 11.16 (Debian 11.16-1.pgdg90+1)
|
|
||||||
-- Dumped by pg_dump version 11.16 (Debian 11.16-1.pgdg90+1)
|
|
||||||
|
|
||||||
SET statement_timeout = 0;
|
|
||||||
SET lock_timeout = 0;
|
|
||||||
SET idle_in_transaction_session_timeout = 0;
|
|
||||||
SET client_encoding = 'UTF8';
|
|
||||||
SET standard_conforming_strings = on;
|
|
||||||
SELECT pg_catalog.set_config('search_path', '', false);
|
|
||||||
SET check_function_bodies = false;
|
|
||||||
SET xmloption = content;
|
|
||||||
SET client_min_messages = warning;
|
|
||||||
SET row_security = off;
|
|
||||||
|
|
||||||
SET default_tablespace = '';
|
|
||||||
|
|
||||||
SET default_with_oids = false;
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: oc_share; Type: TABLE; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE TABLE public.oc_share (
|
|
||||||
id bigint NOT NULL,
|
|
||||||
share_type smallint DEFAULT 0 NOT NULL,
|
|
||||||
share_with character varying(255) DEFAULT NULL::character varying,
|
|
||||||
password character varying(255) DEFAULT NULL::character varying,
|
|
||||||
uid_owner character varying(64) DEFAULT ''::character varying NOT NULL,
|
|
||||||
uid_initiator character varying(64) DEFAULT NULL::character varying,
|
|
||||||
parent bigint,
|
|
||||||
item_type character varying(64) DEFAULT ''::character varying NOT NULL,
|
|
||||||
item_source character varying(255) DEFAULT NULL::character varying,
|
|
||||||
item_target character varying(255) DEFAULT NULL::character varying,
|
|
||||||
file_source bigint,
|
|
||||||
file_target character varying(512) DEFAULT NULL::character varying,
|
|
||||||
permissions smallint DEFAULT 0 NOT NULL,
|
|
||||||
stime bigint DEFAULT 0 NOT NULL,
|
|
||||||
accepted smallint DEFAULT 0 NOT NULL,
|
|
||||||
expiration timestamp(0) without time zone DEFAULT NULL::timestamp without time zone,
|
|
||||||
token character varying(32) DEFAULT NULL::character varying,
|
|
||||||
mail_send smallint DEFAULT 0 NOT NULL,
|
|
||||||
share_name character varying(64) DEFAULT NULL::character varying,
|
|
||||||
password_by_talk boolean DEFAULT false,
|
|
||||||
note text,
|
|
||||||
hide_download smallint DEFAULT 0,
|
|
||||||
label character varying(255) DEFAULT NULL::character varying
|
|
||||||
);
|
|
||||||
|
|
||||||
|
|
||||||
ALTER TABLE public.oc_share OWNER TO nc;
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: oc_share_id_seq; Type: SEQUENCE; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE SEQUENCE public.oc_share_id_seq
|
|
||||||
START WITH 1
|
|
||||||
INCREMENT BY 1
|
|
||||||
NO MINVALUE
|
|
||||||
NO MAXVALUE
|
|
||||||
CACHE 1;
|
|
||||||
|
|
||||||
|
|
||||||
ALTER TABLE public.oc_share_id_seq OWNER TO nc;
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: oc_share_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
ALTER SEQUENCE public.oc_share_id_seq OWNED BY public.oc_share.id;
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: oc_share id; Type: DEFAULT; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
ALTER TABLE ONLY public.oc_share ALTER COLUMN id SET DEFAULT nextval('public.oc_share_id_seq'::regclass);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Data for Name: oc_share; Type: TABLE DATA; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
COPY public.oc_share (id, share_type, share_with, password, uid_owner, uid_initiator, parent, item_type, item_source, item_target, file_source, file_target, permissions, stime, accepted, expiration, token, mail_send, share_name, password_by_talk, note, hide_download, label) FROM stdin;
|
|
||||||
1 3 \N \N admin.local admin.local \N file 1314 \N 1314 /Test feuille.xlsx 19 1644510958 0 \N RiHyHyWRBw4qAQH 0 \N f 0
|
|
||||||
2 3 \N \N admin.local admin.local \N folder 2504 \N 2504 /Comité d'engagement 17 1648638034 0 \N 5AJWRE2aaqSJZrW 0 \N f \N 0
|
|
||||||
3 6 fredj@merlinsystem.com/nextcloud \N Frederic Jozon Frederic Jozon \N folder 1342 \N 1342 31 1649147646 0 \N ePDMGozFDzRfsrl 0 \N f \N 0 \N
|
|
||||||
6 3 \N \N admin.local admin.local \N folder 2761 \N 2761 /Comité d'engagement 17 1649753193 0 \N cE3i7ngpnCkNiKG 0 \N f \N 0
|
|
||||||
8 3 \N \N Ramin Farhangi Ramin Farhangi \N file 13201 \N 13201 /Rencontres Oasis septembre 2022 - Modèle économique et tarification.ods 19 1649779159 0 \N 4KkdJRCcE3aZ3Qn 0 \N f 0
|
|
||||||
7 3 \N \N Ramin Farhangi Ramin Farhangi \N file 13202 \N 13202 /Rencontres Oasis à Oasis du 22-24 septembre 2022 - modèle.odt 19 1649779067 0 \N FK7jRfJQNDbkxzT 0 \N f 0
|
|
||||||
9 3 \N \N Ramin Farhangi Ramin Farhangi \N file 16898 \N 16898 /Rencontres oasis à oasis 22-24 septembre - Rôles et redevabilités.ods 19 1649927426 0 \N apsEJtEQsa9rxAz 0 \N f 0
|
|
||||||
10 3 \N \N admin.local admin.local \N file 22287 \N 22287 /Organisation Nextcloud - Coopérative Oasis.ods 19 1650448091 0 \N 5BokzgJBko3pFfx 0 \N f 0
|
|
||||||
12 3 \N \N admin.local admin.local \N file 22287 \N 22287 /Organisation Nextcloud - Coopérative Oasis.ods 17 1650448199 0 \N DC3nRSCK4NWRNJT 0 \N f \N 0
|
|
||||||
13 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23231 \N 23231 /Matrice lieux d'accueil 2021.ods 17 1650449222 0 \N iK2Be9HPynaqwwL 0 \N f \N 0
|
|
||||||
14 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23230 \N 23230 /Coop oasis - modèle économique Ramïn.ods 17 1650449289 0 \N cPiqttifmYx72Hx 0 \N f \N 0
|
|
||||||
15 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23453 \N 23453 /Cercle 0 - le Noyau.ods 17 1650449384 0 \N GkcGngL43NgyZzq 0 \N f \N 0
|
|
||||||
16 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23454 \N 23454 /Cercle 1 - Oasis à Oasis.ods 17 1650449409 0 \N DociBAAsP3YkXCi 0 \N f \N 0
|
|
||||||
17 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23450 \N 23450 /Coop Oasis - design webinaires et lettres OàO à partir de mai 2022.odt 17 1650449488 0 \N QKbEkPZb7soGzR3 0 \N f \N 0
|
|
||||||
18 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24699 \N 24699 /Rencontres 2022 - Est - Modèle économique et tarification.ods 17 1650554473 0 \N ogPgApGFEyfgDJx 0 \N f \N 0
|
|
||||||
19 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24911 \N 24911 /Rencontres 2022 - Est - Cadre général et programme.odt 19 1650555825 0 \N eWMAG8MGC6zZHoD 0 \N f 0
|
|
||||||
20 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24894 \N 24894 /Rencontres 2022 - Est - Modèle économique et tarification.ods 17 1650555983 0 \N DrzTjS6B4anTnTe 0 \N f \N 0
|
|
||||||
21 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24898 \N 24898 /Rencontres 2022 - Sud - Modèle économique et tarification.ods 19 1650562138 0 \N 57mf2RGFELMpFdF 0 \N f 0
|
|
||||||
22 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24906 \N 24906 /Rencontres 2022 - Sud - Cadre général et programme.odt 19 1650562315 0 \N 8Toq2YgwA2Sn2Ni 0 \N f 0
|
|
||||||
27 1 Coopérative Oasis \N Mathieu Labonne Mathieu Labonne \N folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 0 \N \N 0 \N f \N 0 \N
|
|
||||||
28 2 admin.local \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
29 2 Aurore Borowik \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
32 2 Fabrice Perez \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
33 2 Fabrice Tournier-Courtes \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
34 2 Frederic Jozon \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
35 2 Gabrielle Paoli \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
36 2 Ludovic Simon \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
37 2 Mathieu Labonne \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
39 2 Ramin Farhangi \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
40 3 \N \N Fabrice Perez Fabrice Perez \N file 9867 \N 9867 /Cooperative-Oasis-Dossier-presse-juin-2021.pdf 17 1650966233 0 \N oycXHPJz95Z85Mi 0 \N f \N 0
|
|
||||||
41 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24753 \N 24753 /Rencontres 2022 - Est - Rôles et redevabilités.ods 17 1650975010 0 \N pEFKH3e72GnkJeP 0 \N f \N 0
|
|
||||||
42 3 \N \N Ramin Farhangi Ramin Farhangi \N file 27471 \N 27471 /Rencontres 2022 - Ouest - Modèle économique et tarification.ods 19 1650986878 0 \N FNYfwYTaqmZCymY 0 \N f 0
|
|
||||||
43 3 \N \N Ramin Farhangi Ramin Farhangi \N file 27472 \N 27472 /Rencontres 2022 - Ouest - Rôles et redevabilités.ods 19 1650986902 0 \N G5bbrtWEfFSyt89 0 \N f 0
|
|
||||||
44 3 \N \N Ramin Farhangi Ramin Farhangi \N file 27473 \N 27473 /Rencontres 2022 - Ouest - Cadre général et programme.odt 19 1650986912 0 \N R5foCAtH2wEbP8g 0 \N f 0
|
|
||||||
45 3 \N \N Mathieu Labonne Mathieu Labonne \N file 23624 \N 23624 /Pad réunions d'équipe.md 19 1651002550 0 \N yobqRirJwdxNQ4M 0 \N f 0
|
|
||||||
47 3 \N \N Ramin Farhangi Ramin Farhangi \N file 29498 \N 29498 /Coop Oasis - organisation, rôles et redevabilités.ods 19 1651053500 0 \N rLjcxCRFW6GywDn 0 \N f 0
|
|
||||||
48 3 \N \N Aurore Borowik Aurore Borowik \N file 44086 \N 44086 /Curriculum Vitae du représentant légal de la Coopérative Oasis.pdf 17 1651151428 0 \N mBgSj3n24ot6MoX 0 \N f \N 0
|
|
||||||
49 3 \N \N Aurore Borowik Aurore Borowik \N file 56294 \N 56294 /Levées de fonds Coopérative Oasis.ods 17 1651502448 0 \N BMHK8b2KjT9wR7Q 0 \N f \N 0
|
|
||||||
50 3 \N \N Aurore Borowik Aurore Borowik \N file 56317 \N 56317 /Rapport Du commissaire aux comptes sur les comptes annuels _ exercice clos le 31 décembre 2020.pdf 17 1651502525 0 \N 3x7QodjTHetMQd6 0 \N f \N 0
|
|
||||||
51 3 \N \N Aurore Borowik Aurore Borowik \N file 56318 \N 56318 /COOPERATIVE OASIS - Comptes annuels 31_12_2020.pdf 17 1651502612 0 \N 8t2iRz5bHqnceZY 0 \N f \N 0
|
|
||||||
52 3 \N \N Aurore Borowik Aurore Borowik \N file 56310 \N 56310 /Échéancier de l’endettement sur 5 ans _ Coopérative Oasis.ods 17 1651502700 0 \N XReCHP6DGN3boqY 0 \N f \N 0
|
|
||||||
53 3 \N \N Aurore Borowik Aurore Borowik \N file 56295 \N 56295 /Prévisionnel d'activité _ Coopérative Oasis.ods 17 1651502753 0 \N Lm4zfy3bcLz8yY5 0 \N f \N 0
|
|
||||||
54 3 \N \N Aurore Borowik Aurore Borowik \N file 56309 \N 56309 /Curriculum Vitae du représentant légal de la Coopérative Oasis.pdf 17 1651502798 0 \N cJeybXSe45ijqt8 0 \N f \N 0
|
|
||||||
55 3 \N \N Aurore Borowik Aurore Borowik \N file 56354 \N 56354 /PV CA_Coop OASIS_2018_12_11.pdf 17 1651502911 0 \N 9qjbxAg6X5iCB7s 0 \N f \N 0
|
|
||||||
56 3 \N \N Aurore Borowik Aurore Borowik \N file 56347 \N 56347 /Tableau de répartition de l'actionnariat _ Coopérative Oasis.ods 17 1651502967 0 \N HjjTZwSEzA7xqtm 0 \N f \N 0
|
|
||||||
57 3 \N \N Aurore Borowik Aurore Borowik \N file 56366 \N 56366 /Articles 17 et 20 des statuts de la SCIC SA COOPERATIVE OASIS.pdf 17 1651503040 0 \N 9bQwdrtxzr6WHn3 0 \N f \N 0
|
|
||||||
58 3 \N \N Aurore Borowik Aurore Borowik \N file 56375 \N 56375 /Articles 12 et 15 des statuts de la SCIC SA COOPERATIVE OASIS.pdf 17 1651503104 0 \N sEXQxRWWHaWEnHt 0 \N f \N 0
|
|
||||||
59 3 \N \N Aurore Borowik Aurore Borowik \N file 56387 \N 56387 /Articles 8 et 11 des statuts de la SCIC SA COOPERATIVE OASIS.pdf 17 1651503166 0 \N BMmNzxpNKsqBj74 0 \N f \N 0
|
|
||||||
60 3 \N \N Aurore Borowik Aurore Borowik \N file 56388 \N 56388 /Bulletin-personne-physique.pdf 17 1651503271 0 \N kG8Xd44MzzE4XjM 0 \N f \N 0
|
|
||||||
61 3 \N \N Aurore Borowik Aurore Borowik \N file 56389 \N 56389 /Bulletin-personne-morale.pdf 17 1651503294 0 \N cATQLYqiLSKxrLW 0 \N f \N 0
|
|
||||||
62 3 \N \N Aurore Borowik Aurore Borowik \N file 56596 \N 56596 /Tableau des congés.ods 17 1651514240 0 \N z5y8GMyGfqg47se 0 \N f \N 0
|
|
||||||
63 3 \N \N Fabrice Perez Fabrice Perez \N folder 13641 \N 13641 /Kit Com Oasis Convention 17 1651593789 0 \N 4RoPNQi4LtdBEWg 0 \N f \N 0
|
|
||||||
76 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90674 \N 90674 /CAP SUR LES OASIS Communqué de lancement.odt 19 1652263931 0 \N Q3xoozjSTnCasFp 0 \N f 0
|
|
||||||
67 3 \N \N Mathieu Labonne Mathieu Labonne \N file 83251 \N 83251 /Comité stratégique 2022-05-06.odt 17 1651858176 0 \N 5XQ5ft26xMb35jf 0 \N f \N 0
|
|
||||||
69 3 \N \N Mathieu Labonne Mathieu Labonne \N file 83691 \N 83691 /COOPERATIVE OASIS - COMPTES ANNUELS_2021.pdf 17 1652168085 0 \N MfQYqj7o9RZ3j2S 0 \N f \N 0
|
|
||||||
71 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90259 \N 90259 /Cap sur les Oasis Dossier de présentation.pdf 17 1652261112 0 \N zDWBmS4pxyFxBDb 0 \N f \N 0
|
|
||||||
72 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90266 \N 90266 /Cap sur les Oasis du Sud-Ouest - Saison 1 - Bande-annonce.mp4 17 1652261177 0 \N pytgTxtkmnEqNQc 0 \N f \N 0
|
|
||||||
73 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90495 \N 90495 /Bannières et titres 17 1652261644 0 \N gKTkmFRsCksj2Qe 0 \N f \N 0
|
|
||||||
74 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90317 \N 90317 /Vignettes 17 1652261666 0 \N fdmbaNRAKnHHfbt 0 \N f \N 0
|
|
||||||
75 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90318 \N 90318 /Photos 17 1652261677 0 \N 3bFd64fdH5CgCyQ 0 \N f \N 0
|
|
||||||
77 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90255 \N 90255 /CAP SUR LES OASIS Kit de communication.odt 19 1652264032 0 \N bTp4zkCQo2HXzBr 0 \N f 0
|
|
||||||
78 3 \N \N Mathieu Labonne Mathieu Labonne \N file 90720 \N 90720 /Invités Rencontres 2022.ods 17 1652265835 0 \N B2Q2e4qKm2sCiaP 0 \N f \N 0
|
|
||||||
79 3 \N \N Mathieu Labonne Mathieu Labonne \N folder 86204 \N 86204 /TERRE DE MILPA 17 1652290862 0 \N CCY97ajdT5XQ26k 0 \N f \N 0
|
|
||||||
80 3 \N \N Mathieu Labonne Mathieu Labonne \N file 91288 \N 91288 /TDM_présentation_Ferme_des_Seignes.pdf 17 1652290928 0 \N ANXpRJDtzDtWQ9i 0 \N f \N 0
|
|
||||||
70 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90253 \N 90253 /Kit Com Cap sur les oasis 17 1652261040 0 \N ZZi7XzXJg6jpoR5 0 \N f 0
|
|
||||||
81 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90260 \N 90260 /CAP SUR LES OASIS Calendrier de diffusion.jpg 17 1652789736 0 \N FAfKtgHoyGA9JBC 0 \N f \N 0
|
|
||||||
83 3 \N \N serveur serveur \N file 1314 \N 1314 /Test feuille.xlsx 17 1652968350 0 \N ingaEtoE3gSZQFw 0 \N f \N 0
|
|
||||||
86 2 daphne_vialan \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
87 3 \N \N admin.local admin.local \N file 166356 \N 166356 /Quartier circulaire.odt 17 1653038891 0 \N Sdgd3f6YnYx8EAC 0 \N f \N 0
|
|
||||||
90 3 \N \N Mathieu Labonne Mathieu Labonne \N file 166448 \N 166448 /Suivi contacts Oasis (hors ou avant prêt).xlsx 17 1653300018 0 \N 5p8wFonaNPWds59 0 \N f \N 0
|
|
||||||
93 2 nathalie_boquien \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
94 3 \N \N Mathieu Labonne Mathieu Labonne \N file 177009 \N 177009 /Fiche de rôle Communication et inspiration.docx 17 1653413869 0 \N StXYQ6QBffdRYTs 0 \N f \N 0
|
|
||||||
95 2 coralie_darsy \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
|
|
||||||
88 3 \N \N daphne_vialan daphne_vialan \N file 25818 \N 25818 /Mandat Rôle Prendre soin de l'Humain.xlsx 17 1653147142 0 \N zP7YxQPRjkR2nyH 0 \N f 0 pour les oasis
|
|
||||||
96 3 \N \N Mathieu Labonne Mathieu Labonne \N file 186155 \N 186155 /Fiche de rôle Communication et inspiration.pdf 17 1653998560 0 \N i9G3RZECZoKfmXJ 0 \N f \N 0
|
|
||||||
97 3 \N \N daphne_vialan daphne_vialan \N file 176905 \N 176905 /Coop Oasis - organisation, rôles et redevabilités.ods 17 1654028293 0 \N mj75WDXG8GmSB3M 0 \N f \N 0
|
|
||||||
98 3 \N \N nathalie_boquien nathalie_boquien \N folder 183238 \N 183238 /Docs finaux pour Comité engagement - Petite Graine 17 1654201973 0 \N 3LnrDmeATnsGH2g 0 \N f \N 0
|
|
||||||
99 3 \N \N nathalie_boquien nathalie_boquien \N folder 183238 \N 183238 /Docs finaux pour Comité engagement - Petite Graine 17 1654201983 0 \N kbNeASGgiBxoWEC 0 \N f \N 0
|
|
||||||
100 3 \N \N nathalie_boquien nathalie_boquien \N folder 23684 \N 23684 /Comite engagement 17 1654430328 0 \N XjDKqknYNNjEFkt 0 \N f \N 0
|
|
||||||
101 3 \N \N Ramin Farhangi Ramin Farhangi \N file 195081 \N 195081 /Oasis de Kernours - Coop Oasis.ods 19 1654672970 0 \N xAEjFqwoHAMNMPZ 0 \N f 0
|
|
||||||
103 3 \N \N event event \N file 196005 \N 196005 /Grille tarifaire OASIS 21.xlsx 17 1654776825 0 \N i4F6BS2DMxtr6Dc 0 \N f \N 0
|
|
||||||
104 3 \N \N nathalie_boquien nathalie_boquien \N file 204819 \N 204819 /CR CE Petite graine.docx 19 1654786801 0 \N 2cq4o9ZGfzqeLpE 0 \N f 0
|
|
||||||
105 3 \N \N nathalie_boquien nathalie_boquien \N file 18427 \N 18427 /Devis 2022-NB-6_PetiteGraine signé 8-04-2022.pdf 17 1655130350 0 \N iqm6kPCXkFALJ7z 0 \N f \N 0
|
|
||||||
106 3 \N \N nathalie_boquien nathalie_boquien \N file 189055 \N 189055 /proposition de document cadre vie de lequipe.odt 17 1655214144 0 \N HYAy9qaLffc5Sxb 0 \N f \N 0
|
|
||||||
107 3 \N \N Fabrice Perez Fabrice Perez \N folder 13637 \N 13637 /RVB 17 1655245076 0 \N pLdeMnpXKdLyecF 0 \N f \N 0
|
|
||||||
108 3 \N \N daphne_vialan daphne_vialan \N file 246082 \N 246082 /remuneration proposition.odt 17 1655283100 0 \N oSSsq5ocP2jtETp 0 \N f \N 0
|
|
||||||
109 10 pn8z9muv \N serveur serveur \N file 2482 \N 2482 /{TALK_PLACEHOLDER}/Readme.md 19 1655803587 0 \N RyLqXNn6piiT3Pc 0 \N f \N 0 \N
|
|
||||||
110 11 transfert \N serveur serveur 109 file 2482 \N 2482 /Readme.md 19 1655803587 0 \N \N 0 \N f \N 0 \N
|
|
||||||
111 10 k7sa78si \N serveur serveur \N file 2404 \N 2404 /{TALK_PLACEHOLDER}/toto.ods 19 1655919198 0 \N YmCHdAFWRidc9Ln 0 \N f \N 0 \N
|
|
||||||
112 11 Anne Tavernier \N serveur serveur 111 file 2404 \N 2404 /toto.ods 19 1655919198 0 \N \N 0 \N f \N 0 \N
|
|
||||||
113 3 \N \N nathalie_boquien nathalie_boquien \N folder 204432 \N 204432 /CE 17 1656100171 0 \N BpnQoA58NnSo3KL 0 \N f \N 0
|
|
||||||
114 3 \N \N daphne_vialan daphne_vialan \N file 259638 \N 259638 /ingrid leduc.md 17 1656485529 0 \N tRDWkoGYNfcHN8A 0 \N f \N 0
|
|
||||||
115 3 \N \N Ramin Farhangi Ramin Farhangi \N file 261546 \N 261546 /Extrait AG Coop Oasis - pages 5 à 9.pdf 17 1656502984 0 \N QAMPnoHrmd5LjJZ 0 \N f \N 0
|
|
||||||
116 3 \N \N Aurore Borowik Aurore Borowik \N folder 261615 \N 261615 /Juin 2022_Photos Forge du Vallon 17 1656506802 0 \N 6cys6AgEmZ2LBb2 0 \N f \N 0
|
|
||||||
117 3 \N \N coralie_darsy coralie_darsy \N file 259064 \N 259064 /Présentation WE Forge du Vallon.odp 17 1656649765 0 \N R8J6izxYE2tbBt5 0 \N f \N 0
|
|
||||||
118 3 \N \N nathalie_boquien nathalie_boquien \N file 264120 \N 264120 /CR CE Les Commun.es.docx 19 1656668815 0 \N FadPpRdz5sTtiLY 0 \N f 0
|
|
||||||
119 3 \N \N Mathieu Labonne Mathieu Labonne \N folder 25365 \N 25365 /LES COMMUN.E.S 17 1656697632 0 \N 65NMaGL3e96ArE9 0 \N f \N 0
|
|
||||||
120 3 \N \N Mathieu Labonne Mathieu Labonne \N folder 204432 \N 204432 /CE 17 1656697825 0 \N ArQ7EActTqHqKsC 0 \N f \N 0
|
|
||||||
121 3 \N \N Fabrice Perez Fabrice Perez \N file 264464 \N 264464 /Audiences et bilan.ods 19 1656712578 0 \N CPpmAAGgWcfC7eY 0 \N f 0
|
|
||||||
122 3 \N \N Aurore Borowik Aurore Borowik \N file 71102 \N 71102 /oasis-infographie VDEF Horizontal 1 partie.pdf 17 1657114911 0 \N 48pZWYwfBNfYCEm 0 \N f \N 0
|
|
||||||
123 3 \N \N Aurore Borowik Aurore Borowik \N file 71099 \N 71099 /oasis-infographie VDEF Vertical 2 partie.pdf 17 1657115014 0 \N kQCxJE7SzbY6FeC 0 \N f \N 0
|
|
||||||
124 3 \N \N Aurore Borowik Aurore Borowik \N file 9878 \N 9878 /Dossier-presse-juin-2021.pdf 17 1657115613 0 \N z44Fxijz5K5CGR7 0 \N f \N 0
|
|
||||||
125 3 \N \N Aurore Borowik Aurore Borowik \N file 267540 \N 267540 /Pad ambassadeurs et ambassadrices.md 17 1657121026 0 \N zkJ79jcy5xRLPq7 0 \N f \N 0
|
|
||||||
126 0 Tobias Ollive \N serveur serveur \N file 268352 \N 268352 /test.odt 19 1657230654 1 \N \N 0 \N f \N 0 \N
|
|
||||||
127 3 \N \N Aurore Borowik Aurore Borowik \N file 277937 \N 277937 /oasis-infographie VDEF Horizontal 1 partie.pdf 17 1657535403 0 \N 5zNYy6BSa5cmNsK 0 \N f \N 0
|
|
||||||
128 3 \N \N Aurore Borowik Aurore Borowik \N file 277939 \N 277939 /oasis-infographie VDEF Vertical 2 partie.pdf 17 1657535436 0 \N EgsXDSNyDbQzQbm 0 \N f \N 0
|
|
||||||
129 3 \N \N Aurore Borowik Aurore Borowik \N file 278048 \N 278048 /Dossier-presse-juin-2021.pdf 17 1657535549 0 \N MwXJyAfqi7Z4E6A 0 \N f \N 0
|
|
||||||
132 3 \N \N serveur serveur \N file 269160 \N 269160 /Nextcloud flyer.pdf 17 1657618310 0 \N MddLc7CoPxZK2Bc 0 \N f \N 0
|
|
||||||
133 3 \N \N serveur serveur \N file 269164 \N 269164 /Welcome to Nextcloud Hub.docx 17 1657618326 0 \N ACkXB5RDqzDCnFJ 0 \N f \N 0
|
|
||||||
131 3 \N \N serveur serveur \N file 376132 \N 376132 /encore.odt 17 1657618225 0 \N encoreunfois 0 \N f 0
|
|
||||||
135 3 \N \N serveur serveur \N file 269116 \N 269116 /Readme.md 17 1657620978 0 \N xAb4Kiyxq2sfrNQ 0 \N f \N 0
|
|
||||||
\.
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: oc_share_id_seq; Type: SEQUENCE SET; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
SELECT pg_catalog.setval('public.oc_share_id_seq', 135, true);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: oc_share oc_share_pkey; Type: CONSTRAINT; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
ALTER TABLE ONLY public.oc_share
|
|
||||||
ADD CONSTRAINT oc_share_pkey PRIMARY KEY (id);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: file_source_index; Type: INDEX; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE INDEX file_source_index ON public.oc_share USING btree (file_source);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: initiator_index; Type: INDEX; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE INDEX initiator_index ON public.oc_share USING btree (uid_initiator);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: item_share_type_index; Type: INDEX; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE INDEX item_share_type_index ON public.oc_share USING btree (item_type, share_type);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: owner_index; Type: INDEX; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE INDEX owner_index ON public.oc_share USING btree (uid_owner);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: parent_index; Type: INDEX; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE INDEX parent_index ON public.oc_share USING btree (parent);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: share_with_index; Type: INDEX; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE INDEX share_with_index ON public.oc_share USING btree (share_with);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- Name: token_index; Type: INDEX; Schema: public; Owner: nc
|
|
||||||
--
|
|
||||||
|
|
||||||
CREATE INDEX token_index ON public.oc_share USING btree (token);
|
|
||||||
|
|
||||||
|
|
||||||
--
|
|
||||||
-- PostgreSQL database dump complete
|
|
||||||
--
|
|
||||||
|
|
||||||
@@ -1,22 +0,0 @@
|
|||||||
[supervisord]
|
|
||||||
nodaemon=true
|
|
||||||
logfile=/var/log/supervisord/supervisord.log
|
|
||||||
pidfile=/var/run/supervisord/supervisord.pid
|
|
||||||
childlogdir=/var/log/supervisord/
|
|
||||||
logfile_maxbytes=50MB ; maximum size of logfile before rotation
|
|
||||||
logfile_backups=10 ; number of backed up logfiles
|
|
||||||
loglevel=error
|
|
||||||
|
|
||||||
[program:apache2]
|
|
||||||
stdout_logfile=/dev/stdout
|
|
||||||
stdout_logfile_maxbytes=0
|
|
||||||
stderr_logfile=/dev/stderr
|
|
||||||
stderr_logfile_maxbytes=0
|
|
||||||
command=apache2-foreground
|
|
||||||
|
|
||||||
[program:cron]
|
|
||||||
stdout_logfile=/dev/stdout
|
|
||||||
stdout_logfile_maxbytes=0
|
|
||||||
stderr_logfile=/dev/stderr
|
|
||||||
stderr_logfile_maxbytes=0
|
|
||||||
command=/cron.sh
|
|
||||||
Submodule
+1
Submodule traefik added at 3a0455e577
@@ -1,3 +0,0 @@
|
|||||||
*.secrets
|
|
||||||
.env
|
|
||||||
certs
|
|
||||||
@@ -1,46 +0,0 @@
|
|||||||
## Traefik
|
|
||||||
|
|
||||||
Ce dossier contient les ressources nécessaires pour lancer Traefik, un reverse proxy adapté pour Docker.
|
|
||||||
C'est la pièce la plus importante de l'infrastructure, puisque l'ensemble des communications HTTP(S) passent d'abord par Traefik, et il est aussi utilisé pour [générer des certificats pour les services TCP](../pica-tls-certs-monitor).
|
|
||||||
|
|
||||||
Ce service doit être lancé sur l'ensemble des machines de l'infrastructure.
|
|
||||||
|
|
||||||
Les explications sont sur le Wiki et doivent être modifiées en cas de changement majeur de configuration : https://wiki.picasoft.net/doku.php?id=technique:tech_team:traefik
|
|
||||||
|
|
||||||
### Configuration
|
|
||||||
|
|
||||||
La configuration a lieu dans les fichiers [traefik.toml](./traefik.toml) et [traefik_dynamic.toml](./traefik_dynamic.toml).
|
|
||||||
Notez que toute modification dans ce fichier impactera l'ensemble des machines, puisque le même fichier est utilisé pour l'ensemble des machines.
|
|
||||||
|
|
||||||
À des fins de tests, il peut être modifié localement sur les machines, mais doit toujours rester synchronisé avec ce dépôt à long terme.
|
|
||||||
|
|
||||||
Pour la génération des certificats, Traefik utilise Let's Encrypt. Il n'y a aucune configuration à faire de ce côté. Attention, le nombre de certificats générables est limité à 50 par semaine.
|
|
||||||
|
|
||||||
Si on lance plein de conteneurs de tests, on utilisera temporairement [l'environnement de qualification](https://letsencrypt.org/fr/docs/staging-environment/) de Let's Encrypt, en ajoutant la directive `caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"` sous la section `[certificatesResolvers.letsencrypt.acme]`.
|
|
||||||
|
|
||||||
### Lancement
|
|
||||||
|
|
||||||
#### Certs
|
|
||||||
|
|
||||||
Au premier lancement, assurez-vous que :
|
|
||||||
|
|
||||||
- Le dossier `/DATA/docker/traefik/certs` existe
|
|
||||||
- Créez un fichier `acme.json` à l'intérieur
|
|
||||||
- Changez son propriétaire à `root`
|
|
||||||
- Changez ses permissions à `600`
|
|
||||||
|
|
||||||
C'est dans ce fichier que seront conservés tous les certificats générés par Traefik.
|
|
||||||
|
|
||||||
#### Métriques
|
|
||||||
|
|
||||||
Pour le bon fonctionnement des métriques, il faut aussi créer un fichier `.env` (dans le même dossier que le Docker Compose) qui devra contenir 2 variables :
|
|
||||||
|
|
||||||
- `SERVER_NAME` qui correspond au nom du serveur, par exemple `SERVER_NAME=pica01-test.picasoft.net`
|
|
||||||
- `METRICS_AUTH` qui correspond à la chaîne d'identification htpasswd utilisée pour authentifier sur l'endpoint des métriques, par exemple `METRICS_AUTH="traefik:$apr1$bXnknJ0S$GsC.ozNJc/dAkh9uH7Qlg."`
|
|
||||||
|
|
||||||
### Mise à jour
|
|
||||||
|
|
||||||
Il suffit de mettre à jour le tag de l'image dans Compose.
|
|
||||||
Lire la documentation [sur les mises à jour mineures](https://docs.traefik.io/v2.2/migration/v2/) pour voir s'il y a des opérations à effectuer ou des options dépréciées.
|
|
||||||
|
|
||||||
La mise à jour vers Traefik v2 a été effectuée ; quelques détails sont à consulter [sur le wiki](https://wiki.picasoft.net/doku.php?id=technique:adminsys:migration-traefik-v2).
|
|
||||||
@@ -1,23 +0,0 @@
|
|||||||
version: "3.7"
|
|
||||||
|
|
||||||
networks:
|
|
||||||
proxy:
|
|
||||||
name: "proxy"
|
|
||||||
|
|
||||||
services:
|
|
||||||
traefik:
|
|
||||||
image: traefik:2.10.7
|
|
||||||
container_name: traefik
|
|
||||||
ports:
|
|
||||||
- 80:80
|
|
||||||
- 443:443
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
- ./traefik.toml:/traefik.toml
|
|
||||||
- ./traefik_dynamic.toml:/traefik_dynamic.toml
|
|
||||||
- /DATA/docker/services/certs:/certs
|
|
||||||
environment:
|
|
||||||
TZ: Europe/Paris
|
|
||||||
networks:
|
|
||||||
- proxy
|
|
||||||
restart: unless-stopped
|
|
||||||
@@ -1,50 +0,0 @@
|
|||||||
[global]
|
|
||||||
sendAnonymousUsage = false
|
|
||||||
checkNewVersion = true
|
|
||||||
|
|
||||||
[entryPoints]
|
|
||||||
[entryPoints.web]
|
|
||||||
address = ":80"
|
|
||||||
[entryPoints.web.http.redirections.entryPoint]
|
|
||||||
to = "websecure"
|
|
||||||
scheme = "https"
|
|
||||||
[entryPoints.websecure]
|
|
||||||
address = ":443"
|
|
||||||
[entryPoints.websecure.http]
|
|
||||||
middlewares = ["hardening@file", "compression@file"]
|
|
||||||
[entryPoints.websecure.http.tls]
|
|
||||||
certResolver = "letsencrypt"
|
|
||||||
options = "tls12@file"
|
|
||||||
[entryPoints.metrics]
|
|
||||||
address = ":8082"
|
|
||||||
|
|
||||||
[providers]
|
|
||||||
providersThrottleDuration = "2s"
|
|
||||||
[providers.docker]
|
|
||||||
watch = true
|
|
||||||
endpoint = "unix:///var/run/docker.sock"
|
|
||||||
exposedByDefault = false
|
|
||||||
network = "proxy"
|
|
||||||
[providers.file]
|
|
||||||
filename = "/traefik_dynamic.toml"
|
|
||||||
watch = true
|
|
||||||
|
|
||||||
[log]
|
|
||||||
level = "INFO"
|
|
||||||
|
|
||||||
[accessLog]
|
|
||||||
format = "json"
|
|
||||||
[accessLog.fields.headers]
|
|
||||||
defaultMode = "keep"
|
|
||||||
# See https://doc.traefik.io/traefik/observability/access-logs/#time-zones
|
|
||||||
[accessLog.fields.names]
|
|
||||||
"StartUTC" = "drop"
|
|
||||||
"ClientUsername" = "drop"
|
|
||||||
|
|
||||||
[certificatesResolvers]
|
|
||||||
[certificatesResolvers.letsencrypt]
|
|
||||||
[certificatesResolvers.letsencrypt.acme]
|
|
||||||
email = "serveur@oasis21.org"
|
|
||||||
storage = "/certs/acme.json"
|
|
||||||
[certificatesResolvers.letsencrypt.acme.httpChallenge]
|
|
||||||
entryPoint = "web"
|
|
||||||
@@ -1,54 +0,0 @@
|
|||||||
[tls.options]
|
|
||||||
[tls.options.tls12]
|
|
||||||
minVersion = "VersionTLS12"
|
|
||||||
cipherSuites = [
|
|
||||||
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
|
|
||||||
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
|
|
||||||
"TLS_AES_256_GCM_SHA384",
|
|
||||||
"TLS_CHACHA20_POLY1305_SHA256",
|
|
||||||
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
|
|
||||||
]
|
|
||||||
curvePreferences = ["CurveP521","CurveP384", "CurveP256"]
|
|
||||||
|
|
||||||
[http]
|
|
||||||
[http.middlewares.hardening.headers]
|
|
||||||
browserXssFilter = true
|
|
||||||
contentTypeNosniff = true
|
|
||||||
forceSTSHeader = true
|
|
||||||
frameDeny = true
|
|
||||||
stsIncludeSubdomains = true
|
|
||||||
stsPreload = true
|
|
||||||
customFrameOptionsValue = "ALLOW-FROM https://odoo.cooperative-oasis.org https://cloud.oasis21.org"
|
|
||||||
referrerPolicy = "same-origin"
|
|
||||||
permissionsPolicy = "vibrate='self'"
|
|
||||||
stsSeconds = 315360000
|
|
||||||
|
|
||||||
[http.middlewares.compression.compress]
|
|
||||||
excludedContentTypes = ["text/event-stream"]
|
|
||||||
|
|
||||||
[http.middlewares.allowFrameAndCORS.headers]
|
|
||||||
customFrameOptionsValue = "ALLOW-FROM https://code.oasis21.org https://odoo.cooperative-oasis.org"
|
|
||||||
contentSecurityPolicy = "frame-ancestors * cloud.oasis21.org https://odoo.cooperative-oasis.org"
|
|
||||||
accessControlAllowHeaders = ["*"]
|
|
||||||
accessControlAllowMethods = ["GET", "POST", "OPTIONS"]
|
|
||||||
accessControlAllowOriginList = ["*"]
|
|
||||||
accessControlExposeHeaders = ["*"]
|
|
||||||
|
|
||||||
[http.routers]
|
|
||||||
[http.routers.coopoasis]
|
|
||||||
entrypoints = "websecure"
|
|
||||||
rule = "Host(`odoo.cooperative-oasis.org`) || Host(`pad.cooperative-oasis.org`) || Host(`odoo-dev.cooperative-oasis.org`) || Host(`test-odoo.cooperative-oasis.org`)"
|
|
||||||
service = "coopoasis"
|
|
||||||
[http.routers.papercut]
|
|
||||||
entrypoints = "websecure"
|
|
||||||
rule = "Host(`papercut.oasis21.org`)"
|
|
||||||
service = "papercut"
|
|
||||||
|
|
||||||
[http.services]
|
|
||||||
[http.services.coopoasis.loadBalancer]
|
|
||||||
[[http.services.coopoasis.loadBalancer.servers]]
|
|
||||||
url = "http://172.16.7.12/"
|
|
||||||
[http.services.papercut.loadBalancer]
|
|
||||||
[[http.services.papercut.loadBalancer.servers]]
|
|
||||||
url = "http://172.16.7.13:9191/"
|
|
||||||
|
|
||||||
Submodule
+1
Submodule website added at de2740993b
Reference in New Issue
Block a user