Commit Graph

245 Commits

Author SHA1 Message Date
Thorsten Roßner
c7b6fd0d61 feat(helmfile): Add templating of smtp.spamMilter.*; it is strongly recommended to use this feature to address spam filtering and SPF / DKIM validation of incoming mails 2025-12-05 10:57:17 +01:00
Thorsten Roßner
b507a044c1 feat(helmfile): Add templating of smtp.spamMilterHost; it is strongly recommended to use this feature to address spam filtering and SPF / DKIM validation of incoming mails 2025-12-04 11:08:12 +00:00
Daniel Gerber
8867d1b204 docs(getting-started.md): AAAA record on base domain is optional 2025-12-03 15:44:05 +00:00
Lilly Sell
cca755d4af docs(monitoring.md): Correct references and wordings in monitoring documentation 2025-12-03 15:56:36 +01:00
Thorsten Roßner
7d101b18d7 docs(migrations.md): Update 1.10.0 info on Collabora Controller lease 2025-12-03 07:41:40 +01:00
Thorsten Roßner
10f1ced37d docs(requirements.md): Helm <v4 not supported 2025-12-03 07:41:40 +01:00
Thorsten Roßner
2ddbd91f3d feat(helmfile): [#205, #227] Allow separate annotations for external Dovecot, Postfix and Jitsi JVB service; review migrations.md for required upgrade steps 2025-11-27 08:17:46 +01:00
Thorsten Roßner
f2fe6f3026 docs(migrations.md): Streamlining content 2025-11-21 14:16:32 +01:00
Thorsten Roßner
0ab9979693 docs(gettings-started.md): Update section "Access deployment" 2025-11-21 14:16:32 +01:00
Thorsten Roßner
7032205acf docs(security.md): Update non-verifiable charts table 2025-11-21 14:16:32 +01:00
Thorsten Roßner
a83ecd5c01 docs(gitops.md): [#206] Add warning about secrets in pre-rendered yaml files 2025-11-21 14:16:31 +01:00
Thorsten Roßner
9387168e89 docs(data-storage.md): Streamline with current application state 2025-11-21 14:16:31 +01:00
Thorsten Roßner
bdcfb977e0 docs(migrations.md): Add v1.10.0 section to overview table 2025-11-21 14:16:28 +01:00
Thorsten Roßner
cb367775a6 docs(gettings-started.md): [#184] Add a comment about the maximum length of the openDesk domain 2025-11-21 14:14:02 +01:00
Philip Gaber
e37361790b docs(migrations.md): Update for Postfix SASL security options in v1.9.0 and new Postfix secret 2025-11-21 06:46:31 +00:00
Philip Gaber
684c6d4f29 fix(open-xchange): Template SASL security options 2025-11-21 06:46:31 +00:00
Thorsten Roßner
7b592a24b0 docs(migrations.md): Fix section sequence and some text streamlining 2025-11-19 17:22:51 +01:00
Thomas Kaltenbrunner
f3f707c9ee fix(open-xchange): Optimize Dovecot Pro full-text search caches; review migrations.md for required upgrade steps 2025-11-19 17:20:20 +01:00
Thomas Kaltenbrunner
850761e047 fix(open-xchange): Update Dovecot configuration based on supplier's best practise review 2025-11-19 17:20:02 +01:00
Norbert Tretkowski
12379d67e0 feat(nubus): Update from v1.14.0 to v1.15.2 2025-11-19 16:05:03 +01:00
Thorsten Roßner
152221fa79 fix(nubus): Remove legacy UMC Keycloak client that was used for SAML connection with the Nubus portal 2025-11-14 07:51:31 +00:00
Philip Gaber
47a1ed75e8 docs(migration.md): Further enhance version table and explanations 2025-11-06 15:41:29 +01:00
Philip Gaber
47e13e4ff9 docs(misc): Change to stylized note/warning/important banners 2025-11-06 14:02:34 +01:00
Philip Gaber
b2f1d609cb docs(migration.md): Enhance version semantics, corrections, enhance version table 2025-11-06 13:35:13 +01:00
Thorsten Roßner
25a97abba6 feat(helmfile): Add toggle for external mail client onboarding and allow non-default FQDNs for IMAP and SMTP endpoints 2025-11-04 09:00:34 +01:00
Thorsten Roßner
c115a83924 docs(data-storage.md): Set ox-connector-appcenter-ox-connector-0 PVC as optional instead of mandatory for backup 2025-11-03 10:24:49 +00:00
Thorsten Roßner
026821996a fix(helmfile): Use passwords defined in database.yaml.gotmpl for Cassandra when available 2025-11-03 10:24:49 +00:00
Thorsten Roßner
8151896b55 docs(architecture.md): Fix footnote 2025-11-03 10:24:49 +00:00
Thorsten Roßner
98283aeef7 docs(requirements.md): Explicitly state that local-path-provisioner does not support sticky bit 2025-10-01 11:27:48 +02:00
Thorsten Roßner
4fd991b110 docs(misc): [bmi/opendesk/documentation/handbooks#1] Fixes broken external links 2025-09-30 09:30:24 +02:00
Thorsten Roßner
0c603941aa docs(migrations.md): Add missing yaml annotations on code blocks 2025-09-25 13:03:19 +02:00
Thorsten Roßner
083fa9842d fix(jitsi): [bmi/opendesk/deployment/opendesk#228] Turn off Gravatar option, by default this still keeps the input field in the Jitsi UI, but does not longer issue requests to gravatar.com; check migrations.md in case the option should be enabled 2025-09-25 11:55:09 +02:00
Thorsten Roßner
af9d4cda6c fix(element): Let Synapse create room v12 by default; review migrations.md for details 2025-09-24 18:21:09 +02:00
Thorsten Roßner
31d35b25c6 fix(nextcloud): App "Spreed" and core app "Comments" not enabled by default; review migrations.md for potential upgrade steps 2025-09-24 17:49:52 +02:00
Thorsten Roßner
c75abaf1e6 fix(xwiki): Update image to set new default for user self-registration; review migrations.md for required actions on existing deployments 2025-09-24 16:47:18 +02:00
Thorsten Roßner
8673ff7a57 docs(getting-started.md): Mark smtp relay as optional 2025-09-24 13:48:00 +02:00
Thorsten Roßner
8a7cc3b8c7 feat(open-xchange): Add options to functional.groupware; review migrations.md for details on new defaults/required upgrade steps 2025-09-24 13:47:56 +02:00
Norbert Tretkowski
d3b1f575cc feat(nubus): Update from v1.13.1 to v1.14.0 using OIDC instead of SAML for portal SSO; review migrations.md for required upgrade steps 2025-09-23 12:39:04 +02:00
Thorsten Roßner
ca05ff9c1c docs(self-signed-certificates.md): [bmi/opendesk/deployment/opendesk#230] Add missing caCertificate setting to example 2025-09-19 14:15:53 +00:00
Thorsten Roßner
6f9f926cc5 docs(self-signed-certificates): Update "Option 1" regarding the JKS secret 2025-09-18 06:36:03 +00:00
Thorsten Roßner
6703eb03d5 docs(debugging.md): Add info how to set fine granular log levels for Keycloak 2025-09-15 11:35:57 +02:00
Thorsten Roßner
5a2c1fcf98 feat(nextcloud): Expose forbiddenChars in functional.yaml.gotmpl; review migrations.md for required upgrade steps 2025-09-11 16:39:08 +02:00
Norbert Tretkowski
35424b88d6 feat(nubus): Update from 1.12.0 to 1.13.1 2025-09-09 11:11:44 +02:00
Thorsten Roßner
83e8cec991 chore(release): 1.7.1 [skip ci]
## [1.7.1](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.7.0...v1.7.1) (2025-08-26)

### Bug Fixes

* **collabora:** Update from 25.04.3 to 25.04.4 ([84d6b50](84d6b504d2))
* **helmfile:** When optional mail domain is set, use it as sender domain for system generated (noreply) mails ([bd4c997](bd4c997950))
* **jitsi:** Increase `patchJVB` job `backoffLimit` to avoid deployment failures on infrastructure where LoadBalancer services take longer to become available ([eb2a181](eb2a1811fb))
* **nextcloud:** Fetch central navigation from cluster internal service ([dd0e516](dd0e516778))
* **nextcloud:** Stop browser from caching server-generated files ([410a1ad](410a1ade69))
* **nextcloud:** Work around a bug that breaks the `nextcloud-management` job in case the theming `primary_color` was set in Nextcloud's web UI ([4aebe22](4aebe22f22))
* **notes:** Explicitly template security contexts; add missing ingress classes and pull secrets ([834c847](834c84768a))
* **nubus:** Remove temporary `nubusUdmListener` `livenessProbe` as recommended by supplier ([688a505](688a505ef7))
* **open-xchange:** Click on top bar logo to point to portal instead of mail inbox ([9f762a7](9f762a7c2e))
* **open-xchange:** Configure correct autoreply addresses and enable FTS in Dovecot EE ([997c083](997c083335))
* **open-xchange:** Explicitly deactivate DAV support if not enabled in `functional.yaml.gotmpl` ([62ba5ab](62ba5aba49))
* **open-xchange:** Fix FTS bulk delete in Dovecot EE ([cd2a356](cd2a356b89))
* **open-xchange:** Set mail quota using `functional.groupware.quota.default` ([67fe50e](67fe50e53c))
* **opendesk-static-files:** Serve missing `.png` favicons for Notes and the Nextcloud topbar logo ([42b1105](42b11059d2))
* **ox-connector:** Update OX Connector and OX Extension to v0.27.7 ([57c96af](57c96af5a5))
* **xwiki:** Templating of `imagePullSecrets` ([bbbcd68](bbbcd6807e))
2025-08-26 13:40:33 +00:00
Thorsten Roßner
42b11059d2 fix(opendesk-static-files): Serve missing .png favicons for Notes and the Nextcloud topbar logo 2025-08-25 15:31:16 +02:00
Thomas Kaltenbrunner
67fe50e53c fix(open-xchange): Set mail quota using functional.groupware.quota.default 2025-08-19 10:10:45 +02:00
Thorsten Roßner
d249448794 docs(misc): Streamline sentence heading 2025-08-19 06:40:38 +00:00
Thorsten Roßner
9980d50dce chore(release): 1.7.0 [skip ci]
# [1.7.0](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.6.0...v1.7.0) (2025-08-11)

### Bug Fixes

* **collabora:** Connect to Collabora Controller websocket via service ([5d01f60](5d01f6023d))
* **collabora:** Update from 25.04.2 to 25.04.3 ([3507c62](3507c62f83))
* **helmfile:** Adds default-enterprise-overrides to default values in helmfile-generic ([672e649](672e649b60))
* **nextcloud:** Block filesystem-unsafe characters in file and folder names ([0df6212](0df6212ca9))
* **nextcloud:** Include latest Helm chart version with supports `configuration.sharing.restrictUserEnumerationToGroup` ([c3dfa2a](c3dfa2a607))
* **notes:** Set Pod Disruption Budget (PDB) labels ([e35dac0](e35dac087a))
* **nubus:** Add `livenessProbe` for `nubusUdmListener` to mitigate cases where the listener becomes uninitialized and stops forwarding provisioning data to NATS. Temporary until upstream provides a probe ([ef8d67f](ef8d67f3c1))
* **open-xchange:** Disable documents role ([573e11f](573e11f5c5))
* **open-xchange:** Postfix to support submissions and external secrets ([13ab665](13ab665900))
* **open-xchange:** Support application specific passwords in groupware when CalDAV/CardDAV support is enabled, see `functional.groupware.davSupport.enabled` for reference ([90b2290](90b22904da))
* **open-xchange:** Use dedicated pod for migration ([6fd52b1](6fd52b167e))
* **opendesk-certificates:** Update Helm chart to remove default host for `webmail` being set even if OX App Suite is not enabled ([09a0aac](09a0aace45))
* **opendesk-services:** Update opendesk-alerts from 1.1.1 to 1.1.2, update opendesk-dashboards from 1.1.1 to 1.1.2 ([174d4fc](174d4fc61c))
* **openproject:** Update from 16.2.0 to 16.2.1 ([bba9b71](bba9b716a3))
* **ox-connector:** Update OX Connector and OX Extension to v0.27.2; review `migrations.md` for required upgrade steps ([9d51e40](9d51e40063))

### Features

* **nextcloud:** Enhance theming options for Nextcloud ([bdc7331](bdc7331cb5))
* **notes:** Switch to new Helm chart with support for self-signed deployments; review `migrations.md` for required upgrade steps ([3106ca7](3106ca793e))
* **nubus:** Allow configuration of limits for password reset requests via `security.passwordResetLimits` ([09f54b4](09f54b4134))
* **nubus:** Update from 1.11.2 to 1.12.0 ([5537dbb](5537dbbd7c))
* **open-xchange:** Update from 8.38 to 8.39 ([489986e](489986e906))
* **open-xchange:** Use internal endpoint for provisioning and support for optionally spinning up a dedicated internal Pod just for provisioning (see `technial.oxAppSuite.provisioning.dedicatedCoreMwPod` for details) ([31b7ec7](31b7ec7827))
* **openproject:** Update from 16.1.1 to 16.2.0 ([e273abb](e273abbecf))
2025-08-11 05:22:15 +00:00
Simon Herman
39c057904a docs(migrations.md): Add note for default values in helmfile_generic.yaml.gotmpl 2025-08-09 07:44:05 +02:00
Thomas Kaltenbrunner
6fd52b167e fix(open-xchange): Use dedicated pod for migration 2025-08-09 07:44:05 +02:00