mirror of https://github.com/wekan/wekan
The Open Source kanban (built with Meteor). Keep variable/table/field names camelCase. For translations, only add Pull Request changes to wekan/i18n/en.i18n.json , other translations are done at https://transifex.com/wekan/wekan only.
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
264 lines
8.4 KiB
264 lines
8.4 KiB
FROM debian:11
|
|
LABEL maintainer="sgr"
|
|
|
|
# 2022-04-25:
|
|
# - gyp does not yet work with Ubuntu 22.04 ubuntu:rolling,
|
|
# so changing to 21.10. https://github.com/wekan/wekan/issues/4488
|
|
|
|
ENV BUILD_DEPS="apt-utils apt-transport-https gnupg gosu libarchive-tools wget bzip2 g++ git iproute2"
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
ENV \
|
|
DEBUG=false \
|
|
NODE_VERSION=v14.21.4 \
|
|
METEOR_RELEASE=METEOR@2.13 \
|
|
USE_EDGE=false \
|
|
METEOR_EDGE=1.5-beta.17 \
|
|
NPM_VERSION=latest \
|
|
FIBERS_VERSION=4.0.1 \
|
|
ARCHITECTURE=linux-x64 \
|
|
SRC_PATH=./ \
|
|
WITH_API=true \
|
|
RESULTS_PER_PAGE="" \
|
|
DEFAULT_BOARD_ID="" \
|
|
ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \
|
|
ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \
|
|
ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \
|
|
ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3 \
|
|
ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \
|
|
ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \
|
|
ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90 \
|
|
RICHER_CARD_COMMENT_EDITOR=false \
|
|
CARD_OPENED_WEBHOOK_ENABLED=false \
|
|
ATTACHMENTS_UPLOAD_EXTERNAL_PROGRAM="" \
|
|
ATTACHMENTS_UPLOAD_MIME_TYPES="" \
|
|
ATTACHMENTS_UPLOAD_MAX_SIZE=0 \
|
|
AVATARS_UPLOAD_EXTERNAL_PROGRAM="" \
|
|
AVATARS_UPLOAD_MIME_TYPES="" \
|
|
AVATARS_UPLOAD_MAX_SIZE=0 \
|
|
MAX_IMAGE_PIXEL="" \
|
|
IMAGE_COMPRESS_RATIO="" \
|
|
NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE="" \
|
|
BIGEVENTS_PATTERN=NONE \
|
|
NOTIFY_DUE_DAYS_BEFORE_AND_AFTER="" \
|
|
NOTIFY_DUE_AT_HOUR_OF_DAY="" \
|
|
EMAIL_NOTIFICATION_TIMEOUT=30000 \
|
|
MATOMO_ADDRESS="" \
|
|
MATOMO_SITE_ID="" \
|
|
MATOMO_DO_NOT_TRACK=true \
|
|
MATOMO_WITH_USERNAME=false \
|
|
BROWSER_POLICY_ENABLED=true \
|
|
TRUSTED_URL="" \
|
|
WEBHOOKS_ATTRIBUTES="" \
|
|
OAUTH2_ENABLED=false \
|
|
OAUTH2_CA_CERT="" \
|
|
OAUTH2_ADFS_ENABLED=false \
|
|
OAUTH2_B2C_ENABLED=false \
|
|
OAUTH2_LOGIN_STYLE=redirect \
|
|
OAUTH2_CLIENT_ID="" \
|
|
OAUTH2_SECRET="" \
|
|
OAUTH2_SERVER_URL="" \
|
|
OAUTH2_AUTH_ENDPOINT="" \
|
|
OAUTH2_USERINFO_ENDPOINT="" \
|
|
OAUTH2_TOKEN_ENDPOINT="" \
|
|
OAUTH2_ID_MAP="" \
|
|
OAUTH2_USERNAME_MAP="" \
|
|
OAUTH2_FULLNAME_MAP="" \
|
|
OAUTH2_ID_TOKEN_WHITELIST_FIELDS="" \
|
|
OAUTH2_REQUEST_PERMISSIONS='openid profile email' \
|
|
OAUTH2_EMAIL_MAP="" \
|
|
LDAP_ENABLE=false \
|
|
LDAP_PORT=389 \
|
|
LDAP_HOST="" \
|
|
LDAP_AD_SIMPLE_AUTH="" \
|
|
LDAP_USER_AUTHENTICATION=false \
|
|
LDAP_USER_AUTHENTICATION_FIELD=uid \
|
|
LDAP_BASEDN="" \
|
|
LDAP_LOGIN_FALLBACK=false \
|
|
LDAP_RECONNECT=true \
|
|
LDAP_TIMEOUT=10000 \
|
|
LDAP_IDLE_TIMEOUT=10000 \
|
|
LDAP_CONNECT_TIMEOUT=10000 \
|
|
LDAP_AUTHENTIFICATION=false \
|
|
LDAP_AUTHENTIFICATION_USERDN="" \
|
|
LDAP_AUTHENTIFICATION_PASSWORD="" \
|
|
LDAP_LOG_ENABLED=false \
|
|
LDAP_BACKGROUND_SYNC=false \
|
|
LDAP_BACKGROUND_SYNC_INTERVAL="" \
|
|
LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false \
|
|
LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false \
|
|
LDAP_ENCRYPTION=false \
|
|
LDAP_CA_CERT="" \
|
|
LDAP_REJECT_UNAUTHORIZED=false \
|
|
LDAP_USER_SEARCH_FILTER="" \
|
|
LDAP_USER_SEARCH_SCOPE="" \
|
|
LDAP_USER_SEARCH_FIELD="" \
|
|
LDAP_SEARCH_PAGE_SIZE=0 \
|
|
LDAP_SEARCH_SIZE_LIMIT=0 \
|
|
LDAP_GROUP_FILTER_ENABLE=false \
|
|
LDAP_GROUP_FILTER_OBJECTCLASS="" \
|
|
LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE="" \
|
|
LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE="" \
|
|
LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT="" \
|
|
LDAP_GROUP_FILTER_GROUP_NAME="" \
|
|
LDAP_UNIQUE_IDENTIFIER_FIELD="" \
|
|
LDAP_UTF8_NAMES_SLUGIFY=true \
|
|
LDAP_USERNAME_FIELD="" \
|
|
LDAP_FULLNAME_FIELD="" \
|
|
LDAP_MERGE_EXISTING_USERS=false \
|
|
LDAP_EMAIL_FIELD="" \
|
|
LDAP_EMAIL_MATCH_ENABLE=false \
|
|
LDAP_EMAIL_MATCH_REQUIRE=false \
|
|
LDAP_EMAIL_MATCH_VERIFIED=false \
|
|
LDAP_SYNC_USER_DATA=false \
|
|
LDAP_SYNC_USER_DATA_FIELDMAP="" \
|
|
LDAP_SYNC_GROUP_ROLES="" \
|
|
LDAP_DEFAULT_DOMAIN="" \
|
|
LDAP_SYNC_ADMIN_STATUS="" \
|
|
LDAP_SYNC_ADMIN_GROUPS="" \
|
|
HEADER_LOGIN_ID="" \
|
|
HEADER_LOGIN_FIRSTNAME="" \
|
|
HEADER_LOGIN_LASTNAME="" \
|
|
HEADER_LOGIN_EMAIL="" \
|
|
LOGOUT_WITH_TIMER=false \
|
|
LOGOUT_IN="" \
|
|
LOGOUT_ON_HOURS="" \
|
|
LOGOUT_ON_MINUTES="" \
|
|
CORS="" \
|
|
CORS_ALLOW_HEADERS="" \
|
|
CORS_EXPOSE_HEADERS="" \
|
|
DEFAULT_AUTHENTICATION_METHOD="" \
|
|
PASSWORD_LOGIN_ENABLED=true \
|
|
CAS_ENABLED=false \
|
|
CAS_BASE_URL="" \
|
|
CAS_LOGIN_URL="" \
|
|
CAS_VALIDATE_URL="" \
|
|
SAML_ENABLED=false \
|
|
SAML_PROVIDER="" \
|
|
SAML_ENTRYPOINT="" \
|
|
SAML_ISSUER="" \
|
|
SAML_CERT="" \
|
|
SAML_IDPSLO_REDIRECTURL="" \
|
|
SAML_PRIVATE_KEYFILE="" \
|
|
SAML_PUBLIC_CERTFILE="" \
|
|
SAML_IDENTIFIER_FORMAT="" \
|
|
SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="" \
|
|
SAML_ATTRIBUTES="" \
|
|
ORACLE_OIM_ENABLED=false \
|
|
WAIT_SPINNER="" \
|
|
S3=""
|
|
# \
|
|
# NODE_OPTIONS="--max_old_space_size=4096"
|
|
|
|
#---------------------------------------------------------------------
|
|
# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
|
|
# Add more Node heap:
|
|
# NODE_OPTIONS="--max_old_space_size=4096"
|
|
# Add more stack:
|
|
# bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
|
|
#---------------------------------------------------------------------
|
|
|
|
ENV PATH=$PATH:/home/wekan/.meteor/
|
|
|
|
RUN <<EOR
|
|
echo "export PATH=$PATH" >> /etc/environment
|
|
EOR
|
|
|
|
# Copy source dir
|
|
RUN <<EOR
|
|
set -o xtrace \
|
|
mkdir -p /home/wekan/app/.meteor
|
|
mkdir -p /home/wekan/app/packages
|
|
EOR
|
|
|
|
COPY \
|
|
.meteor/.finished-upgraders \
|
|
.meteor/.id \
|
|
.meteor/cordova-plugins \
|
|
.meteor/packages \
|
|
.meteor/platforms \
|
|
.meteor/release \
|
|
.meteor/versions \
|
|
/home/wekan/app/.meteor/
|
|
|
|
COPY \
|
|
package.json \
|
|
settings.json \
|
|
/home/wekan/app/
|
|
|
|
COPY \
|
|
tests \
|
|
/home/wekan/app/tests/
|
|
|
|
COPY \
|
|
packages \
|
|
/home/wekan/app/packages/
|
|
|
|
# Install OS
|
|
RUN <<EOR
|
|
set -o xtrace
|
|
|
|
useradd --user-group --no-create-home --system --home-dir /home/wekan wekan
|
|
apt-get update
|
|
apt-get install --assume-yes --no-install-recommends ${BUILD_DEPS} curl python3 ca-certificates build-essential
|
|
|
|
# Install NodeJS
|
|
cd /tmp
|
|
curl -fsSLO --compressed "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.xz"
|
|
curl -fsSLO --compressed "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt"
|
|
grep " node-$NODE_VERSION-$ARCHITECTURE.tar.xz\$" SHASUMS256.txt | sha256sum -c -
|
|
tar -xJf "node-$NODE_VERSION-$ARCHITECTURE.tar.xz" -C /usr/local --strip-components=1 --no-same-owner
|
|
rm "node-$NODE_VERSION-$ARCHITECTURE.tar.xz" SHASUMS256.txt
|
|
ln -s /usr/local/bin/node /usr/local/bin/nodejs
|
|
mkdir -p /usr/local/lib/node_modules/fibers/.node-gyp /root/.node-gyp/${NODE_VERSION} /home/wekan/.config
|
|
npm install -g npm@${NPM_VERSION}
|
|
chown wekan:wekan --recursive /home/wekan/.config
|
|
|
|
# Install Meteor
|
|
cd /home/wekan
|
|
curl https://install.meteor.com/?release=$METEOR_VERSION --output /home/wekan/install-meteor.sh
|
|
|
|
# Replace tar with bsdtar in the install script; https://github.com/jshimko/meteor-launchpad/issues/39
|
|
sed --in-place "s/tar -xzf.*/bsdtar -xf \"\$TARBALL_FILE\" -C \"\$INSTALL_TMPDIR\"/g" /home/wekan/install-meteor.sh
|
|
sed --in-place 's/VERBOSITY="--silent"/VERBOSITY="--progress-bar"/' /home/wekan/install-meteor.sh
|
|
printf "\n[-] Installing Meteor $METEOR_VERSION...\n\n"
|
|
chown wekan:wekan -R /home/wekan
|
|
gosu wekan:wekan sh /home/wekan/install-meteor.sh &&
|
|
|
|
chown -R wekan:wekan /home/wekan/app /home/wekan/.meteor
|
|
cd /home/wekan/.meteor
|
|
gosu wekan:wekan /home/wekan/.meteor/meteor -- help
|
|
|
|
# Build app
|
|
cd /home/wekan/app
|
|
gosu wekan:wekan /home/wekan/.meteor/meteor add standard-minifier-js
|
|
gosu wekan:wekan /home/wekan/.meteor/meteor npm install
|
|
|
|
# Cleanup
|
|
apt-get remove --purge --assume-yes ${BUILD_DEPS}
|
|
apt-get install --assume-yes --no-install-recommends build-essential
|
|
apt-get clean -y
|
|
apt-get autoremove -y
|
|
rm -Rf /tmp/*
|
|
rm -Rf /home/wekan/app_build
|
|
rm -Rf /var/cache/apt /var/lib/apt/lists
|
|
rm -Rf /var/lib/apt/lists/*
|
|
EOR
|
|
|
|
USER wekan
|
|
|
|
ENV PORT=3000
|
|
EXPOSE $PORT
|
|
WORKDIR /home/wekan/app
|
|
|
|
#---------------------------------------------------------------------
|
|
# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
|
|
# Add more Node heap:
|
|
# NODE_OPTIONS="--max_old_space_size=4096"
|
|
# Add more stack:
|
|
# bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
|
|
#---------------------------------------------------------------------
|
|
#TODO:
|
|
#CMD ["bash", "-c", "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"]
|
|
|
|
CMD ["/home/wekan/.meteor/meteor", "run", "--verbose", "--settings", "settings.json"]
|
|
|