1119 lines
40 KiB
YAML
1119 lines
40 KiB
YAML
# Include{groups}
|
|
portals:
|
|
open:
|
|
# Include{portalLink}
|
|
questions:
|
|
# Include{global}
|
|
# Include{controller}
|
|
# Include{controllerDeployment}
|
|
# Include{replicas}
|
|
# Include{replica1}
|
|
# Include{strategy}
|
|
# Include{recreate}
|
|
# Include{controllerExpert}
|
|
# Include{controllerExpertExtraArgs}
|
|
- variable: env
|
|
group: "Container Configuration"
|
|
label: "Image Environment"
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: ROOT_URL
|
|
label: "ROOT_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
required: true
|
|
- variable: BROWSER_POLICY_ENABLED
|
|
label: "BROWSER_POLICY_ENABLED"
|
|
description: "Enable browser policy and allow one trusted URL that can have iframe that has Wekan embedded inside."
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: TRUSTED_URL
|
|
label: "TRUSTED_URL"
|
|
description: "When browser policy is enabled, HTML code at this Trusted URL can have iframe that embeds Wekan inside."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: logoutenabled
|
|
label: "Logout/Login Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: LOGOUT_WITH_TIMER
|
|
label: "LOGOUT_WITH_TIMER"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LOGOUT_IN
|
|
label: "LOGOUT_IN (Days)"
|
|
schema:
|
|
type: int
|
|
default: 0
|
|
- variable: LOGOUT_ON_HOURS
|
|
label: "LOGOUT_ON_HOURS"
|
|
schema:
|
|
type: int
|
|
default: 0
|
|
- variable: LOGOUT_ON_MINUTES
|
|
label: "LOGOUT_ON_MINUTES"
|
|
schema:
|
|
type: int
|
|
default: 0
|
|
- variable: ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS
|
|
label: "ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS"
|
|
schema:
|
|
type: int
|
|
default: 90
|
|
- variable: passwordnabled
|
|
label: "Password Brute Force Protection Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE
|
|
label: "ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE"
|
|
schema:
|
|
type: int
|
|
default: 3
|
|
- variable: ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD
|
|
label: "ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD"
|
|
schema:
|
|
type: int
|
|
default: 60
|
|
- variable: ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW
|
|
label: "ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW"
|
|
schema:
|
|
type: int
|
|
default: 15
|
|
- variable: ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE
|
|
label: "ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE"
|
|
schema:
|
|
type: int
|
|
default: 3
|
|
- variable: ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD
|
|
label: "ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD"
|
|
schema:
|
|
type: int
|
|
default: 60
|
|
- variable: ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW
|
|
label: "ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW"
|
|
schema:
|
|
type: int
|
|
default: 15
|
|
- variable: imagenabled
|
|
label: "Image Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: MAX_IMAGE_PIXEL
|
|
label: "MAX_IMAGE_PIXEL"
|
|
schema:
|
|
type: int
|
|
default: 1024
|
|
- variable: IMAGE_COMPRESS_RATIO
|
|
label: "IMAGE_COMPRESS_RATIO"
|
|
schema:
|
|
type: int
|
|
default: 80
|
|
- variable: mailenabled
|
|
label: "Mail Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: MAIL_URL
|
|
label: "MAIL_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: MAIL_SERVICE_USER
|
|
label: "MAIL_SERVICE_USER"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: MAIL_SERVICE_PASSWORD
|
|
label: "MAIL_SERVICE_PASSWORD"
|
|
schema:
|
|
type: string
|
|
private: true
|
|
default: ""
|
|
- variable: MAIL_SERVICE
|
|
label: "MAIL_SERVICE"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: notificationsenabled
|
|
label: "Notifications Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: BIGEVENTS_PATTERN
|
|
label: "BIGEVENTS_PATTERN"
|
|
schema:
|
|
type: string
|
|
default: "NONE"
|
|
- variable: NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE
|
|
label: "NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE"
|
|
description: "Number of days after a notification is read before we remove it."
|
|
schema:
|
|
type: int
|
|
default: 90
|
|
- variable: EMAIL_NOTIFICATION_TIMEOUT
|
|
label: "EMAIL_NOTIFICATION_TIMEOUT"
|
|
schema:
|
|
type: int
|
|
default: 30000
|
|
- variable: NOTIFY_DUE_DAYS_BEFORE_AND_AFTER
|
|
label: "NOTIFY_DUE_DAYS_BEFORE_AND_AFTER"
|
|
description: "Notify due days, default is None, 2 days before and on the event day"
|
|
schema:
|
|
type: string
|
|
default: "2,0"
|
|
- variable: NOTIFY_DUE_AT_HOUR_OF_DAY
|
|
label: "NOTIFY_DUE_AT_HOUR_OF_DAY"
|
|
description: "Notify due at hour of day."
|
|
schema:
|
|
type: int
|
|
default: 8
|
|
- variable: personalizationenabled
|
|
label: "UX Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: RESULTS_PER_PAGE
|
|
label: "RESULTS_PER_PAGE"
|
|
schema:
|
|
type: int
|
|
default: 20
|
|
required: true
|
|
- variable: RICHER_CARD_COMMENT_EDITOR
|
|
label: "RICHER_CARD_COMMENT_EDITOR"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: CARD_OPENED_WEBHOOK_ENABLED
|
|
label: "CARD_OPENED_WEBHOOK_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: PASSWORD_LOGIN_ENABLED
|
|
label: "PASSWORD_LOGIN_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: WAIT_SPINNER
|
|
label: "WAIT_SPINNER"
|
|
description: "Sets the Wait Spinner animation"
|
|
schema:
|
|
type: string
|
|
default: "Bounce"
|
|
enum:
|
|
- value: "Bounce"
|
|
description: "Bounce"
|
|
- value: "Cube"
|
|
description: "Cube"
|
|
- value: "Cube-Grid"
|
|
description: "Cube-Grid"
|
|
- value: "Dot"
|
|
description: "Dot"
|
|
- value: "Double-Bounce"
|
|
description: "Double-Bounce"
|
|
- value: "Rotateplane"
|
|
description: "Rotateplane"
|
|
- value: "Scaleout"
|
|
description: "Scaleout"
|
|
- value: "Wave"
|
|
description: "Wave"
|
|
- variable: backendenabled
|
|
label: "Backend Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: WITH_API
|
|
label: "WITH_API"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: WEBHOOKS_ATTRIBUTES
|
|
label: "WEBHOOKS_ATTRIBUTES"
|
|
description: "What to send to Outgoing Webhook."
|
|
schema:
|
|
type: string
|
|
default: "cardId,listId,oldListId,boardId,comment,user,card,commentId,swimlaneId,customerField,customFieldValue"
|
|
- variable: corsenabled
|
|
label: "CORS Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: CORS
|
|
label: "CORS"
|
|
schema:
|
|
type: string
|
|
default: "*"
|
|
- variable: CORS_ALLOW_HEADERS
|
|
label: "CORS_ALLOW_HEADERS"
|
|
schema:
|
|
type: string
|
|
default: "Authorization,Content-Type"
|
|
- variable: CORS_EXPOSE_HEADERS
|
|
label: "CORS_EXPOSE_HEADERS"
|
|
schema:
|
|
type: string
|
|
default: "*"
|
|
- variable: matomoenabled
|
|
label: "Matomo Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: MATOMO_ADDRESS
|
|
label: "MATOMO_ADDRESS"
|
|
description: "The address of the server where Matomo is hosted."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: MATOMO_SITE_ID
|
|
label: "MATOMO_SITE_ID"
|
|
description: "The value of the site ID given in Matomo server for Wekan."
|
|
schema:
|
|
type: int
|
|
default: 1
|
|
- variable: MATOMO_DO_NOT_TRACK
|
|
label: "MATOMO_DO_NOT_TRACK"
|
|
description: "The option do not track which enables users to not be tracked by matomo."
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: MATOMO_WITH_USERNAME
|
|
label: "MATOMO_WITH_USERNAME"
|
|
description: "The option that allows matomo to retrieve the username."
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: ORACLE_OIM_ENABLED
|
|
label: "ORACLE_OIM_ENABLED"
|
|
description: "OAUTH2 ORACLE on premise identity manager OIM"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: oatuhncenabled
|
|
label: "OAUTH2 Nextcloud Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: OAUTH2_ENABLED
|
|
label: "OAUTH2_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: OAUTH2_LOGIN_STYLE
|
|
label: "OAUTH2_LOGIN_STYLE"
|
|
description: "OAuth2 login style: popup or redirect."
|
|
schema:
|
|
type: string
|
|
default: "redirect"
|
|
enum:
|
|
- value: "redirect"
|
|
description: "redirect"
|
|
- value: "popup"
|
|
description: "popup"
|
|
- variable: OAUTH2_CLIENT_ID
|
|
label: "OAUTH2_CLIENT_ID"
|
|
description: "Application GUID captured during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SECRET
|
|
label: "OAUTH2_SECRET"
|
|
description: "Secret key generated during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SERVER_URL
|
|
label: "OAUTH2_SERVER_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_AUTH_ENDPOINT
|
|
label: "OAUTH2_AUTH_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_USERINFO_ENDPOINT
|
|
label: "OAUTH2_USERINFO_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_TOKEN_ENDPOINT
|
|
label: "OAUTH2_TOKEN_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_ID_MAP
|
|
label: "OAUTH2_ID_MAP"
|
|
description: "The claim name you want to map to the unique ID field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_USERNAME_MAP
|
|
label: "OAUTH2_USERNAME_MAP"
|
|
description: "The claim name you want to map to the username field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_FULLNAME_MAP
|
|
label: "OAUTH2_FULLNAME_MAP"
|
|
description: "The claim name you want to map to the full name field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_EMAIL_MAP
|
|
label: "OAUTH2_EMAIL_MAP"
|
|
description: "The claim name you want to map to the email field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: oatuhkeycloackenabled
|
|
label: "OAUTH2 Keycloack Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: OAUTH2_ENABLED
|
|
label: "OAUTH2_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: OAUTH2_LOGIN_STYLE
|
|
label: "OAUTH2_LOGIN_STYLE"
|
|
description: "OAuth2 login style: popup or redirect."
|
|
schema:
|
|
type: string
|
|
default: "redirect"
|
|
enum:
|
|
- value: "redirect"
|
|
description: "redirect"
|
|
- value: "popup"
|
|
description: "popup"
|
|
- variable: OAUTH2_CLIENT_ID
|
|
label: "OAUTH2_CLIENT_ID"
|
|
description: "Application GUID captured during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SECRET
|
|
label: "OAUTH2_SECRET"
|
|
description: "Secret key generated during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SERVER_URL
|
|
label: "OAUTH2_SERVER_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_AUTH_ENDPOINT
|
|
label: "OAUTH2_AUTH_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_USERINFO_ENDPOINT
|
|
label: "OAUTH2_USERINFO_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_TOKEN_ENDPOINT
|
|
label: "OAUTH2_TOKEN_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: oatuhdoorkeeperenabled
|
|
label: "OAUTH2 Doorkeeper Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: OAUTH2_ENABLED
|
|
label: "OAUTH2_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: OAUTH2_LOGIN_STYLE
|
|
label: "OAUTH2_LOGIN_STYLE"
|
|
description: "OAuth2 login style: popup or redirect."
|
|
schema:
|
|
type: string
|
|
default: "redirect"
|
|
enum:
|
|
- value: "redirect"
|
|
description: "redirect"
|
|
- value: "popup"
|
|
description: "popup"
|
|
- variable: OAUTH2_CLIENT_ID
|
|
label: "OAUTH2_CLIENT_ID"
|
|
description: "Application GUID captured during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SECRET
|
|
label: "OAUTH2_SECRET"
|
|
description: "Secret key generated during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SERVER_URL
|
|
label: "OAUTH2_SERVER_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_AUTH_ENDPOINT
|
|
label: "OAUTH2_AUTH_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_USERINFO_ENDPOINT
|
|
label: "OAUTH2_USERINFO_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_TOKEN_ENDPOINT
|
|
label: "OAUTH2_TOKEN_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_ID_TOKEN_WHITELIST_FIELDS
|
|
label: "OAUTH2_ID_TOKEN_WHITELIST_FIELDS"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_REQUEST_PERMISSIONS
|
|
label: "OAUTH2_REQUEST_PERMISSIONS"
|
|
description: "The claim name you want to map to the unique ID field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_ID_MAP
|
|
label: "OAUTH2_ID_MAP"
|
|
description: "The claim name you want to map to the unique ID field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_USERNAME_MAP
|
|
label: "OAUTH2_USERNAME_MAP"
|
|
description: "The claim name you want to map to the username field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_FULLNAME_MAP
|
|
label: "OAUTH2_FULLNAME_MAP"
|
|
description: "The claim name you want to map to the full name field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_EMAIL_MAP
|
|
label: "OAUTH2_EMAIL_MAP"
|
|
description: "The claim name you want to map to the email field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: oatuhazureenabled
|
|
label: "OAUTH2 Azure Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: OAUTH2_ENABLED
|
|
label: "OAUTH2_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: OAUTH2_CA_CERT
|
|
label: "OAUTH2_CA_CERT"
|
|
schema:
|
|
type: string
|
|
private: true
|
|
default: ""
|
|
- variable: OAUTH2_ADFS_ENABLED
|
|
label: "OAUTH2_ADFS_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: OAUTH2_LOGIN_STYLE
|
|
label: "OAUTH2_LOGIN_STYLE"
|
|
description: "OAuth2 login style: popup or redirect."
|
|
schema:
|
|
type: string
|
|
default: "redirect"
|
|
enum:
|
|
- value: "redirect"
|
|
description: "redirect"
|
|
- value: "popup"
|
|
description: "popup"
|
|
- variable: OAUTH2_CLIENT_ID
|
|
label: "OAUTH2_CLIENT_ID"
|
|
description: "Application GUID captured during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SECRET
|
|
label: "OAUTH2_SECRET"
|
|
description: "Secret key generated during app registration"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_SERVER_URL
|
|
label: "OAUTH2_SERVER_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_AUTH_ENDPOINT
|
|
label: "OAUTH2_AUTH_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_USERINFO_ENDPOINT
|
|
label: "OAUTH2_USERINFO_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_TOKEN_ENDPOINT
|
|
label: "OAUTH2_TOKEN_ENDPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_ID_MAP
|
|
label: "OAUTH2_ID_MAP"
|
|
description: "The claim name you want to map to the unique ID field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_USERNAME_MAP
|
|
label: "OAUTH2_USERNAME_MAP"
|
|
description: "The claim name you want to map to the username field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_FULLNAME_MAP
|
|
label: "OAUTH2_FULLNAME_MAP"
|
|
description: "The claim name you want to map to the full name field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: OAUTH2_EMAIL_MAP
|
|
label: "OAUTH2_EMAIL_MAP"
|
|
description: "The claim name you want to map to the email field."
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: ldapenabled
|
|
label: "LDAP Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: LDAP_ENABLE
|
|
label: "LDAP_ENABLE"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: DEFAULT_AUTHENTICATION_METHOD
|
|
label: "DEFAULT_AUTHENTICATION_METHOD"
|
|
schema:
|
|
type: string
|
|
default: "ldap"
|
|
- variable: LDAP_PORT
|
|
label: "LDAP_PORT"
|
|
schema:
|
|
type: int
|
|
default: 389
|
|
- variable: LDAP_HOST
|
|
label: "LDAP_HOST"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_AD_SIMPLE_AUTH
|
|
label: "LDAP_AD_SIMPLE_AUTH"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_USER_AUTHENTICATION
|
|
label: "LDAP_USER_AUTHENTICATION"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_USER_AUTHENTICATION_FIELD
|
|
label: "LDAP_USER_AUTHENTICATION_FIELD"
|
|
schema:
|
|
type: string
|
|
default: "uid"
|
|
- variable: LDAP_DEFAULT_DOMAIN
|
|
label: "LDAP_DEFAULT_DOMAIN"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_BASEDN
|
|
label: "LDAP_BASEDN"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_LOGIN_FALLBACK
|
|
label: "LDAP_LOGIN_FALLBACK"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_RECONNECT
|
|
label: "LDAP_RECONNECT"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_TIMEOUT
|
|
label: "LDAP_TIMEOUT"
|
|
schema:
|
|
type: int
|
|
default: 10000
|
|
- variable: LDAP_IDLE_TIMEOUT
|
|
label: "LDAP_IDLE_TIMEOUT"
|
|
schema:
|
|
type: int
|
|
default: 10000
|
|
- variable: LDAP_CONNECT_TIMEOUT
|
|
label: "LDAP_CONNECT_TIMEOUT"
|
|
schema:
|
|
type: int
|
|
default: 10000
|
|
- variable: LDAP_AUTHENTIFICATION
|
|
label: "LDAP_AUTHENTIFICATION"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_AUTHENTIFICATION_USERDN
|
|
label: "LDAP_AUTHENTIFICATION_USERDN"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_AUTHENTIFICATION_PASSWORD
|
|
label: "LDAP_AUTHENTIFICATION_PASSWORD"
|
|
schema:
|
|
type: string
|
|
private: true
|
|
default: ""
|
|
- variable: LDAP_LOG_ENABLED
|
|
label: "LDAP_LOG_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_BACKGROUND_SYNC
|
|
label: "LDAP_BACKGROUND_SYNC"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_BACKGROUND_SYNC_INTERVAL
|
|
label: "LDAP_BACKGROUND_SYNC_INTERVAL"
|
|
schema:
|
|
type: string
|
|
default: "every 1 hour"
|
|
- variable: LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED
|
|
label: "LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS
|
|
label: "LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_ENCRYPTION
|
|
label: "LDAP_ENCRYPTION"
|
|
schema:
|
|
type: string
|
|
default: "false"
|
|
- variable: LDAP_CA_CERT
|
|
label: "LDAP_CA_CERT"
|
|
schema:
|
|
type: string
|
|
private: true
|
|
default: ""
|
|
- variable: LDAP_REJECT_UNAUTHORIZED
|
|
label: "LDAP_REJECT_UNAUTHORIZED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_USER_SEARCH_FILTER
|
|
label: "LDAP_USER_SEARCH_FILTER"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_USER_SEARCH_SCOPE
|
|
label: "LDAP_USER_SEARCH_SCOPE"
|
|
schema:
|
|
type: string
|
|
default: "one"
|
|
enum:
|
|
- value: "one"
|
|
description: "one"
|
|
- value: "base"
|
|
description: "base"
|
|
- value: "sub"
|
|
description: "sub"
|
|
- variable: LDAP_USER_SEARCH_FIELD
|
|
label: "LDAP_USER_SEARCH_FIELD"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_SEARCH_PAGE_SIZE
|
|
label: "LDAP_SEARCH_PAGE_SIZE"
|
|
schema:
|
|
type: int
|
|
default: 0
|
|
- variable: LDAP_SEARCH_SIZE_LIMIT
|
|
label: "LDAP_SEARCH_SIZE_LIMIT"
|
|
schema:
|
|
type: int
|
|
default: 0
|
|
- variable: LDAP_GROUP_FILTER_ENABLE
|
|
label: "LDAP_GROUP_FILTER_ENABLE"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_GROUP_FILTER_OBJECTCLASS
|
|
label: "LDAP_GROUP_FILTER_OBJECTCLASS"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE
|
|
label: "LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE
|
|
label: "LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT
|
|
label: "LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_GROUP_FILTER_GROUP_NAME
|
|
label: "LDAP_GROUP_FILTER_GROUP_NAME"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_UNIQUE_IDENTIFIER_FIELD
|
|
label: "LDAP_UNIQUE_IDENTIFIER_FIELD"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_UTF8_NAMES_SLUGIFY
|
|
label: "LDAP_UTF8_NAMES_SLUGIFY"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_USERNAME_FIELD
|
|
label: "LDAP_USERNAME_FIELD"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_FULLNAME_FIELD
|
|
label: "LDAP_FULLNAME_FIELD"
|
|
schema:
|
|
type: string
|
|
default: "fullname"
|
|
- variable: LDAP_MERGE_EXISTING_USERS
|
|
label: "LDAP_MERGE_EXISTING_USERS"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_EMAIL_MATCH_ENABLE
|
|
label: "LDAP_EMAIL_MATCH_ENABLE"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_EMAIL_MATCH_REQUIRE
|
|
label: "LDAP_EMAIL_MATCH_REQUIRE"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_EMAIL_MATCH_VERIFIED
|
|
label: "LDAP_EMAIL_MATCH_VERIFIED"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_EMAIL_FIELD
|
|
label: "LDAP_EMAIL_FIELD"
|
|
schema:
|
|
type: string
|
|
default: "mail"
|
|
- variable: LDAP_SYNC_USER_DATA
|
|
label: "LDAP_SYNC_USER_DATA"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: LDAP_SYNC_USER_DATA_FIELDMAP
|
|
label: "LDAP_SYNC_USER_DATA_FIELDMAP"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_SYNC_GROUP_ROLES
|
|
label: "LDAP_SYNC_GROUP_ROLES"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: LDAP_SYNC_ADMIN_STATUS
|
|
label: "LDAP_SYNC_ADMIN_STATUS"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: LDAP_SYNC_ADMIN_GROUPS
|
|
label: "LDAP_SYNC_ADMIN_GROUPS"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: headerenabled
|
|
label: "LDAP Header Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: HEADER_LOGIN_ID
|
|
label: "HEADER_LOGIN_ID"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: HEADER_LOGIN_FIRSTNAME
|
|
label: "HEADER_LOGIN_FIRSTNAME"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: HEADER_LOGIN_LASTNAME
|
|
label: "HEADER_LOGIN_LASTNAME"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: HEADER_LOGIN_EMAIL
|
|
label: "HEADER_LOGIN_EMAIL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: casenabled
|
|
label: "CAS Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: CAS_ENABLED
|
|
label: "CAS_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: CAS_BASE_URL
|
|
label: "CAS_BASE_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: CAS_LOGIN_URL
|
|
label: "CAS_LOGIN_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: CAS_VALIDATE_URL
|
|
label: "CAS_VALIDATE_URL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: samlenabled
|
|
label: "SAML Settings"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: SAML_ENABLED
|
|
label: "SAML_ENABLED"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: SAML_PROVIDER
|
|
label: "SAML_PROVIDER"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_ENTRYPOINT
|
|
label: "SAML_ENTRYPOINT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_ISSUER
|
|
label: "SAML_ISSUER"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_CERT
|
|
label: "SAML_CERT"
|
|
schema:
|
|
type: string
|
|
private: true
|
|
default: ""
|
|
- variable: SAML_IDPSLO_REDIRECTURL
|
|
label: "SAML_IDPSLO_REDIRECTURL"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_PRIVATE_KEYFILE
|
|
label: "SAML_PRIVATE_KEYFILE"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_PUBLIC_CERTFILE
|
|
label: "SAML_PUBLIC_CERTFILE"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_IDENTIFIER_FORMAT
|
|
label: "SAML_IDENTIFIER_FORMAT"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE
|
|
label: "SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: SAML_ATTRIBUTES
|
|
label: "SAML_ATTRIBUTES"
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
# Include{containerConfig}
|
|
# Include{serviceRoot}
|
|
- variable: main
|
|
label: "Main Service"
|
|
description: "The Primary service on which the healthcheck runs, often the webUI"
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{serviceSelectorLoadBalancer}
|
|
# Include{serviceSelectorExtras}
|
|
- variable: main
|
|
label: "Main Service Port Configuration"
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: port
|
|
label: "Port"
|
|
description: "This port exposes the container port on the service"
|
|
schema:
|
|
type: int
|
|
default: 10192
|
|
required: true
|
|
# Include{advancedPortHTTP}
|
|
- variable: targetPort
|
|
label: "Target Port"
|
|
description: "The internal(!) port on the container the Application runs on"
|
|
schema:
|
|
type: int
|
|
default: 8080
|
|
# Include{serviceExpertRoot}
|
|
default: false
|
|
# Include{serviceExpert}
|
|
# Include{serviceList}
|
|
# Include{persistenceRoot}
|
|
- variable: data
|
|
label: "App Data Storage"
|
|
description: "Stores the Application Data."
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{persistenceBasic}
|
|
# Include{persistenceAdvanced}
|
|
# Include{persistenceList}
|
|
# Include{ingressRoot}
|
|
- variable: main
|
|
label: "Main Ingress"
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{ingressDefault}
|
|
# Include{ingressTLS}
|
|
# Include{ingressTraefik}
|
|
# Include{ingressExpert}
|
|
# Include{ingressList}
|
|
# Include{security}
|
|
# Include{securityContextAdvancedRoot}
|
|
- variable: privileged
|
|
label: "Privileged mode"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: readOnlyRootFilesystem
|
|
label: "ReadOnly Root Filesystem"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: allowPrivilegeEscalation
|
|
label: "Allow Privilege Escalation"
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: runAsNonRoot
|
|
label: "runAsNonRoot"
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
# Include{securityContextAdvanced}
|
|
# Include{podSecurityContextRoot}
|
|
- variable: runAsUser
|
|
label: "runAsUser"
|
|
description: "The UserID of the user running the application"
|
|
schema:
|
|
type: int
|
|
default: 568
|
|
- variable: runAsGroup
|
|
label: "runAsGroup"
|
|
description: "The groupID this App of the user running the application"
|
|
schema:
|
|
type: int
|
|
default: 568
|
|
- variable: fsGroup
|
|
label: "fsGroup"
|
|
description: "The group that should own ALL storage."
|
|
schema:
|
|
type: int
|
|
default: 568
|
|
# Include{podSecurityContextAdvanced}
|
|
# Include{resources}
|
|
# Include{advanced}
|
|
# Include{addons}
|
|
# Include{documentation}
|