start-wekan.sh 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516
  1. #!/bin/bash
  2. # If you want to restart even on crash, uncomment while and done lines.
  3. #while true; do
  4. cd .build/bundle
  5. #---------------------------------------------
  6. # Debug OIDC OAuth2 etc.
  7. #export DEBUG=true
  8. #---------------------------------------------
  9. export MONGO_URL='mongodb://127.0.0.1:27017/wekan'
  10. #---------------------------------------------
  11. # WRITEABLE PATH
  12. export WRITABLE_PATH=..
  13. #---------------------------------------------
  14. # Production: https://example.com/wekan
  15. # Local: http://localhost:2000
  16. #export ipaddress=$(ifdata -pa eth0)
  17. export ROOT_URL='http://localhost:2000'
  18. #---------------------------------------------
  19. # https://github.com/wekan/wekan/wiki/Troubleshooting-Mail
  20. # https://github.com/wekan/wekan-mongodb/blob/master/docker-compose.yml
  21. export MAIL_URL='smtp://user:pass@mailserver.example.com:25/'
  22. export MAIL_FROM='Wekan Boards <info@example.com>'
  23. # Currently MAIL_SERVICE is not in use.
  24. #export MAIL_SERVICE=Outlook365
  25. #export MAIL_SERVICE_USER=firstname.lastname@hotmail.com
  26. #export MAIL_SERVICE_PASSWORD=SecretPassword
  27. #---------------------------------------------
  28. #export KADIRA_OPTIONS_ENDPOINT=http://127.0.0.1:11011
  29. #---------------------------------------------
  30. # This is local port where Wekan Node.js runs, same as below on Caddyfile settings.
  31. export PORT=2000
  32. #---------------------------------------------
  33. # ==== NUMBER OF SEARCH RESULTS PER PAGE BY DEFAULT ====
  34. #export RESULTS_PER_PAGE=20
  35. #---------------------------------------------
  36. # Wekan Export Board works when WITH_API=true.
  37. # If you disable Wekan API with false, Export Board does not work.
  38. export WITH_API='true'
  39. #---------------------------------------------------------------
  40. # ==== PASSWORD BRUTE FORCE PROTECTION ====
  41. #https://atmospherejs.com/lucasantoniassi/accounts-lockout
  42. #Defaults below. Uncomment to change. wekan/server/accounts-lockout.js
  43. #export ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3
  44. #export ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60
  45. #export ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15
  46. #export ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3
  47. #export ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60
  48. #export ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15
  49. #---------------------------------------------------------------
  50. # ==== ACCOUNT OPTIONS ====
  51. # https://docs.meteor.com/api/accounts-multi.html#AccountsCommon-config
  52. # Defaults below. Uncomment to change. wekan/server/accounts-common.js
  53. # - ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90
  54. #---------------------------------------------------------------
  55. # ==== RICH TEXT EDITOR IN CARD COMMENTS ====
  56. # https://github.com/wekan/wekan/pull/2560
  57. export RICHER_CARD_COMMENT_EDITOR=false
  58. #---------------------------------------------------------------
  59. # ==== CARD OPENED, SEND WEBHOOK MESSAGE ====
  60. export CARD_OPENED_WEBHOOK_ENABLED=false
  61. #---------------------------------------------------------------
  62. # ==== Allow to shrink attached/pasted image ====
  63. # https://github.com/wekan/wekan/pull/2544
  64. #export MAX_IMAGE_PIXEL=1024
  65. #export IMAGE_COMPRESS_RATIO=80
  66. #---------------------------------------------------------------
  67. # ==== NOTIFICATION TRAY AFTER READ DAYS BEFORE REMOVE =====
  68. # Number of days after a notification is read before we remove it.
  69. # Default: 2
  70. #- NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE=2
  71. #---------------------------------------------------------------
  72. # ==== BIGEVENTS DUE ETC NOTIFICATIONS =====
  73. # https://github.com/wekan/wekan/pull/2541
  74. # Introduced a system env var BIGEVENTS_PATTERN default as "NONE",
  75. # so any activityType matches the pattern, system will send out
  76. # notifications to all board members no matter they are watching
  77. # or tracking the board or not. Owner of the wekan server can
  78. # disable the feature by setting this variable to "NONE" or
  79. # change the pattern to any valid regex. i.e. '|' delimited
  80. # activityType names.
  81. # a) Example
  82. #export BIGEVENTS_PATTERN=due
  83. # b) All
  84. #export BIGEVENTS_PATTERN=received|start|due|end
  85. # c) Disabled
  86. export BIGEVENTS_PATTERN=NONE
  87. #---------------------------------------------------------------
  88. # ==== EMAIL DUE DATE NOTIFICATION =====
  89. # https://github.com/wekan/wekan/pull/2536
  90. # System timelines will be showing any user modification for
  91. # dueat startat endat receivedat, also notification to
  92. # the watchers and if any card is due, about due or past due.
  93. #
  94. # Notify due days, default is None.
  95. #export NOTIFY_DUE_DAYS_BEFORE_AND_AFTER=2,0
  96. # it will notify user 2 days before due day and on the due day
  97. #
  98. # Notify due at hour of day. Default every morning at 8am. Can be 0-23.
  99. # If env variable has parsing error, use default. Notification sent to watchers.
  100. #export NOTIFY_DUE_AT_HOUR_OF_DAY=8
  101. #-----------------------------------------------------------------
  102. # ==== EMAIL NOTIFICATION TIMEOUT, ms =====
  103. # Defaut: 30000 ms = 30s
  104. #export EMAIL_NOTIFICATION_TIMEOUT=30000
  105. #-----------------------------------------------------------------
  106. # CORS: Set Access-Control-Allow-Origin header. Example: *
  107. #export CORS=*
  108. # To enable the Set Access-Control-Allow-Headers header. "Authorization,Content-Type" is required for cross-origin use of the API.
  109. #export CORS_ALLOW_HEADERS=Authorization,Content-Type
  110. # To enable the Set Access-Control-Expose-Headers header. This is not needed for typical CORS situations. Example: *
  111. #export CORS_EXPOSE_HEADERS=*
  112. #---------------------------------------------
  113. ## Optional: Integration with Matomo https://matomo.org that is installed to your server
  114. ## The address of the server where Matomo is hosted:
  115. ##export MATOMO_ADDRESS=https://example.com/matomo
  116. #export MATOMO_ADDRESS=
  117. ## The value of the site ID given in Matomo server for Wekan
  118. # Example: export MATOMO_SITE_ID=123456789
  119. #export MATOMO_SITE_ID=''
  120. ## The option do not track which enables users to not be tracked by matomo"
  121. #Example: export MATOMO_DO_NOT_TRACK=false
  122. #export MATOMO_DO_NOT_TRACK=true
  123. ## The option that allows matomo to retrieve the username:
  124. # Example: export MATOMO_WITH_USERNAME=true
  125. #export MATOMO_WITH_USERNAME='false'
  126. #---------------------------------------------
  127. # Enable browser policy and allow one trusted URL that can have iframe that has Wekan embedded inside.
  128. # Setting this to false is not recommended, it also disables all other browser policy protections
  129. # and allows all iframing etc. See wekan/server/policy.js
  130. # Default value: true
  131. export BROWSER_POLICY_ENABLED=true
  132. # When browser policy is enabled, HTML code at this Trusted URL can have iframe that embeds Wekan inside.
  133. # Example: export TRUSTED_URL=http://example.com
  134. export TRUSTED_URL=''
  135. # What to send to Outgoing Webhook, or leave out. Example, that includes all that are default: cardId,listId,oldListId,boardId,comment,user,card,commentId .
  136. # Example: export WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
  137. export WEBHOOKS_ATTRIBUTES=''
  138. #---------------------------------------------
  139. # OAUTH2 ORACLE on premise identity manager OIM
  140. #export ORACLE_OIM_ENABLED=true
  141. #---------------------------------------------
  142. # ==== OAUTH2 AZURE ====
  143. # https://github.com/wekan/wekan/wiki/Azure
  144. # 1) Register the application with Azure. Make sure you capture
  145. # the application ID as well as generate a secret key.
  146. # 2) Configure the environment variables. This differs slightly
  147. # by installation type, but make sure you have the following:
  148. #export OAUTH2_ENABLED=true
  149. #
  150. # Optional OAuth2 CA Cert, see https://github.com/wekan/wekan/issues/3299
  151. #export OAUTH2_CA_CERT=ABCD1234
  152. #
  153. # Use OAuth2 ADFS additional changes. Also needs OAUTH2_ENABLED=true setting.
  154. #export OAUTH2_ADFS_ENABLED=false
  155. #
  156. # OAuth2 docs: https://github.com/wekan/wekan/wiki/OAuth2
  157. # OAuth2 login style: popup or redirect.
  158. #export OAUTH2_LOGIN_STYLE=redirect
  159. #
  160. # Application GUID captured during app registration:
  161. #export OAUTH2_CLIENT_ID=xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx
  162. #
  163. # Secret key generated during app registration:
  164. #export OAUTH2_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
  165. #export OAUTH2_SERVER_URL=https://login.microsoftonline.com/
  166. #export OAUTH2_AUTH_ENDPOINT=/oauth2/v2.0/authorize
  167. #export OAUTH2_USERINFO_ENDPOINT=https://graph.microsoft.com/oidc/userinfo
  168. #export OAUTH2_TOKEN_ENDPOINT=/oauth2/v2.0/token
  169. #
  170. # The claim name you want to map to the unique ID field:
  171. #export OAUTH2_ID_MAP=email
  172. #
  173. # The claim name you want to map to the username field:
  174. #export OAUTH2_USERNAME_MAP=email
  175. #
  176. # The claim name you want to map to the full name field:
  177. #export OAUTH2_FULLNAME_MAP=name
  178. #
  179. # The claim name you want to map to the email field:
  180. #export OAUTH2_EMAIL_MAP=email
  181. #-----------------------------------------------------------------
  182. # ==== OAUTH2 KEYCLOAK ====
  183. # https://github.com/wekan/wekan/wiki/Keycloak <== MAPPING INFO, REQUIRED
  184. #export OAUTH2_ENABLED=true
  185. # OAuth2 login style: popup or redirect.
  186. #export OAUTH2_LOGIN_STYLE=redirect
  187. #export OAUTH2_CLIENT_ID=<Keycloak create Client ID>
  188. #export OAUTH2_SERVER_URL=<Keycloak server name>/auth
  189. #export OAUTH2_AUTH_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/auth
  190. #export OAUTH2_USERINFO_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/userinfo
  191. #export OAUTH2_TOKEN_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/token
  192. #export OAUTH2_SECRET=<keycloak client secret>
  193. #-----------------------------------------------------------------
  194. # ==== OAUTH2 DOORKEEPER ====
  195. # OAuth2 docs: https://github.com/wekan/wekan/wiki/OAuth2
  196. # https://github.com/wekan/wekan/issues/1874
  197. # https://github.com/wekan/wekan/wiki/OAuth2
  198. # Enable the OAuth2 connection
  199. #export OAUTH2_ENABLED=true
  200. #
  201. # OAuth2 login style: popup or redirect.
  202. #export OAUTH2_LOGIN_STYLE=redirect
  203. #
  204. # OAuth2 Client ID.
  205. #export OAUTH2_CLIENT_ID=abcde12345
  206. #
  207. # OAuth2 Secret.
  208. #export OAUTH2_SECRET=54321abcde
  209. #
  210. # OAuth2 Server URL.
  211. #export OAUTH2_SERVER_URL=https://chat.example.com
  212. #
  213. # OAuth2 Authorization Endpoint.
  214. #export OAUTH2_AUTH_ENDPOINT=/oauth/authorize
  215. #
  216. # OAuth2 Userinfo Endpoint.
  217. #export OAUTH2_USERINFO_ENDPOINT=/oauth/userinfo
  218. #
  219. # OAuth2 Token Endpoint.
  220. #export OAUTH2_TOKEN_ENDPOINT=/oauth/token
  221. #
  222. # OAUTH2 ID Token Whitelist Fields.
  223. #export OAUTH2_ID_TOKEN_WHITELIST_FIELDS=[]
  224. #
  225. # OAUTH2 Request Permissions.
  226. #export OAUTH2_REQUEST_PERMISSIONS=openid profile email
  227. #
  228. # OAuth2 ID Mapping
  229. #export OAUTH2_ID_MAP=
  230. #
  231. # OAuth2 Username Mapping
  232. #export OAUTH2_USERNAME_MAP=
  233. #
  234. # OAuth2 Fullname Mapping
  235. #export OAUTH2_FULLNAME_MAP=
  236. #
  237. # OAuth2 Email Mapping
  238. #export OAUTH2_EMAIL_MAP=
  239. #---------------------------------------------
  240. # LDAP_ENABLE : Enable or not the connection by the LDAP
  241. # example : export LDAP_ENABLE=true
  242. #export LDAP_ENABLE=false
  243. #
  244. # LDAP_PORT : The port of the LDAP server
  245. # example : export LDAP_PORT=389
  246. #export LDAP_PORT=389
  247. #
  248. # LDAP_HOST : The host server for the LDAP server
  249. # example : export LDAP_HOST=localhost
  250. #export LDAP_HOST=
  251. #
  252. #-----------------------------------------------------------------
  253. # ==== LDAP AD Simple Auth ====
  254. #
  255. # Set to true, if you want to connect with Active Directory by Simple Authentication.
  256. # When using AD Simple Auth, LDAP_BASEDN is not needed.
  257. #
  258. # Example:
  259. #export LDAP_AD_SIMPLE_AUTH=true
  260. #
  261. # === LDAP User Authentication ===
  262. #
  263. # a) Option to login to the LDAP server with the user's own username and password, instead of
  264. # an administrator key. Default: false (use administrator key).
  265. #
  266. # b) When using AD Simple Auth, set to true, when login user is used for binding,
  267. # and LDAP_BASEDN is not needed.
  268. #
  269. # Example:
  270. #export LDAP_USER_AUTHENTICATION=true
  271. #
  272. # Which field is used to find the user for the user authentication. Default: uid.
  273. #export LDAP_USER_AUTHENTICATION_FIELD=uid
  274. #
  275. # === LDAP Default Domain ===
  276. #
  277. # a) In case AD SimpleAuth is configured, the default domain is appended to the given
  278. # loginname for creating the correct username for the bind request to AD.
  279. #
  280. # b) The default domain of the ldap it is used to create email if the field is not map
  281. # correctly with the LDAP_SYNC_USER_DATA_FIELDMAP
  282. #
  283. # Example :
  284. #export LDAP_DEFAULT_DOMAIN=mydomain.com
  285. #
  286. #-----------------------------------------------------------------
  287. # ==== LDAP BASEDN Auth ====
  288. #
  289. # LDAP_BASEDN : The base DN for the LDAP Tree
  290. # example : export LDAP_BASEDN=ou=user,dc=example,dc=org
  291. #export LDAP_BASEDN=
  292. #
  293. #---------------------------------------------
  294. # LDAP_LOGIN_FALLBACK : Fallback on the default authentication method
  295. # example : export LDAP_LOGIN_FALLBACK=true
  296. #export LDAP_LOGIN_FALLBACK=false
  297. #
  298. # LDAP_RECONNECT : Reconnect to the server if the connection is lost
  299. # example : export LDAP_RECONNECT=false
  300. #export LDAP_RECONNECT=true
  301. #
  302. # LDAP_TIMEOUT : Overall timeout, in milliseconds
  303. # example : export LDAP_TIMEOUT=12345
  304. #export LDAP_TIMEOUT=10000
  305. #
  306. # LDAP_IDLE_TIMEOUT : Specifies the timeout for idle LDAP connections in milliseconds
  307. # example : export LDAP_IDLE_TIMEOUT=12345
  308. #export LDAP_IDLE_TIMEOUT=10000
  309. #
  310. # LDAP_CONNECT_TIMEOUT : Connection timeout, in milliseconds
  311. # example : export LDAP_CONNECT_TIMEOUT=12345
  312. #export LDAP_CONNECT_TIMEOUT=10000
  313. #
  314. # LDAP_AUTHENTIFICATION : If the LDAP needs a user account to search
  315. # example : export LDAP_AUTHENTIFICATION=true
  316. #export LDAP_AUTHENTIFICATION=false
  317. #
  318. # LDAP_AUTHENTIFICATION_USERDN : The search user DN
  319. # example : export LDAP_AUTHENTIFICATION_USERDN=cn=admin,dc=example,dc=org
  320. #----------------------------------------------------------------------------
  321. # The search user DN - You need quotes when you have spaces in parameters
  322. # 2 examples:
  323. #export LDAP_AUTHENTIFICATION_USERDN="CN=ldap admin,CN=users,DC=domainmatter,DC=lan"
  324. #export LDAP_AUTHENTIFICATION_USERDN="CN=wekan_adm,OU=serviceaccounts,OU=admin,OU=prod,DC=mydomain,DC=com"
  325. #---------------------------------------------------------------------------
  326. # LDAP_AUTHENTIFICATION_PASSWORD : The password for the search user
  327. # example : AUTHENTIFICATION_PASSWORD=admin
  328. #export LDAP_AUTHENTIFICATION_PASSWORD=
  329. #
  330. # LDAP_LOG_ENABLED : Enable logs for the module
  331. # example : export LDAP_LOG_ENABLED=true
  332. #export LDAP_LOG_ENABLED=false
  333. #
  334. # LDAP_BACKGROUND_SYNC : If the sync of the users should be done in the background
  335. # example : export LDAP_BACKGROUND_SYNC=true
  336. #export LDAP_BACKGROUND_SYNC=false
  337. #
  338. # LDAP_BACKGROUND_SYNC_INTERVAL : At which interval does the background task sync in milliseconds
  339. # At which interval does the background task sync in milliseconds.
  340. # Leave this unset, so it uses default, and does not crash.
  341. # https://github.com/wekan/wekan/issues/2354#issuecomment-515305722
  342. export LDAP_BACKGROUND_SYNC_INTERVAL=''
  343. #
  344. # LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED :
  345. # example : export LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=true
  346. #export LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false
  347. #
  348. # LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS :
  349. # example : export LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=true
  350. #export LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false
  351. #
  352. # LDAP_ENCRYPTION : If using LDAPS
  353. # example : export LDAP_ENCRYPTION=ssl
  354. #export LDAP_ENCRYPTION=false
  355. #
  356. # LDAP_CA_CERT : The certification for the LDAPS server. Certificate needs to be included in this docker-compose.yml file.
  357. # example : export LDAP_CA_CERT=-----BEGIN CERTIFICATE-----MIIE+zCCA+OgAwIBAgIkAhwR/6TVLmdRY6hHxvUFWc0+Enmu/Hu6cj+G2FIdAgIC...-----END CERTIFICATE-----
  358. #export LDAP_CA_CERT=
  359. #
  360. # LDAP_REJECT_UNAUTHORIZED : Reject Unauthorized Certificate
  361. # example : export LDAP_REJECT_UNAUTHORIZED=true
  362. #export LDAP_REJECT_UNAUTHORIZED=false
  363. #
  364. # LDAP_USER_SEARCH_FILTER : Optional extra LDAP filters. Don't forget the outmost enclosing parentheses if needed
  365. # example : export LDAP_USER_SEARCH_FILTER=
  366. #export LDAP_USER_SEARCH_FILTER=
  367. #
  368. # LDAP_USER_SEARCH_SCOPE : base (search only in the provided DN), one (search only in the provided DN and one level deep), or sub (search the whole subtree)
  369. # example : export LDAP_USER_SEARCH_SCOPE=one
  370. #export LDAP_USER_SEARCH_SCOPE=
  371. #
  372. # LDAP_USER_SEARCH_FIELD : Which field is used to find the user
  373. # example : export LDAP_USER_SEARCH_FIELD=uid
  374. #export LDAP_USER_SEARCH_FIELD=
  375. #
  376. # LDAP_SEARCH_PAGE_SIZE : Used for pagination (0=unlimited)
  377. # example : export LDAP_SEARCH_PAGE_SIZE=12345
  378. #export LDAP_SEARCH_PAGE_SIZE=0
  379. #
  380. # LDAP_SEARCH_SIZE_LIMIT : The limit number of entries (0=unlimited)
  381. # example : export LDAP_SEARCH_SIZE_LIMIT=12345
  382. #export LDAP_SEARCH_SIZE_LIMIT=0
  383. #
  384. # LDAP_GROUP_FILTER_ENABLE : Enable group filtering
  385. # example : export LDAP_GROUP_FILTER_ENABLE=true
  386. #export LDAP_GROUP_FILTER_ENABLE=false
  387. #
  388. # LDAP_GROUP_FILTER_OBJECTCLASS : The object class for filtering
  389. # example : export LDAP_GROUP_FILTER_OBJECTCLASS=group
  390. #export LDAP_GROUP_FILTER_OBJECTCLASS=
  391. #
  392. # LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE :
  393. # example :
  394. #export LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE=
  395. #
  396. # LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE :
  397. # example :
  398. #export LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE=
  399. #
  400. # LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT :
  401. # example :
  402. #export LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT=
  403. #
  404. # LDAP_GROUP_FILTER_GROUP_NAME :
  405. # example :
  406. #export LDAP_GROUP_FILTER_GROUP_NAME=
  407. #
  408. # LDAP_UNIQUE_IDENTIFIER_FIELD : This field is sometimes class GUID (Globally Unique Identifier)
  409. # example : export LDAP_UNIQUE_IDENTIFIER_FIELD=guid
  410. #export LDAP_UNIQUE_IDENTIFIER_FIELD=
  411. #
  412. # LDAP_UTF8_NAMES_SLUGIFY : Convert the username to utf8
  413. # example : export LDAP_UTF8_NAMES_SLUGIFY=false
  414. #export LDAP_UTF8_NAMES_SLUGIFY=true
  415. #
  416. # LDAP_USERNAME_FIELD : Which field contains the ldap username
  417. # example : export LDAP_USERNAME_FIELD=username
  418. #export LDAP_USERNAME_FIELD=
  419. #
  420. # LDAP_FULLNAME_FIELD : Which field contains the ldap fullname
  421. # example : export LDAP_FULLNAME_FIELD=fullname
  422. #export LDAP_FULLNAME_FIELD=
  423. #
  424. # LDAP_MERGE_EXISTING_USERS :
  425. # example : export LDAP_MERGE_EXISTING_USERS=true
  426. #export LDAP_MERGE_EXISTING_USERS=false
  427. #
  428. # LDAP_EMAIL_MATCH_ENABLE : allow existing account matching by e-mail address when username does not match
  429. # example: LDAP_EMAIL_MATCH_ENABLE=true
  430. #export LDAP_EMAIL_MATCH_ENABLE=false
  431. #
  432. # LDAP_EMAIL_MATCH_REQUIRE : require existing account matching by e-mail address when username does match
  433. # example: LDAP_EMAIL_MATCH_REQUIRE=true
  434. #export LDAP_EMAIL_MATCH_REQUIRE=false
  435. #
  436. # LDAP_EMAIL_MATCH_VERIFIED : require existing account email address to be verified for matching
  437. # example: LDAP_EMAIL_MATCH_VERIFIED=true
  438. #export LDAP_EMAIL_MATCH_VERIFIED=false
  439. #
  440. # LDAP_EMAIL_FIELD : which field contains the LDAP e-mail address
  441. # example: LDAP_EMAIL_FIELD=mail
  442. #export LDAP_EMAIL_FIELD=
  443. #
  444. # LDAP_SYNC_USER_DATA :
  445. # example : export LDAP_SYNC_USER_DATA=true
  446. #export LDAP_SYNC_USER_DATA=false
  447. #
  448. # LDAP_SYNC_USER_DATA_FIELDMAP :
  449. # example : export LDAP_SYNC_USER_DATA_FIELDMAP={"cn":"name", "mail":"email"}
  450. #export LDAP_SYNC_USER_DATA_FIELDMAP=
  451. #
  452. # The default domain of the ldap it is used to create email if the field is not map correctly
  453. # with the LDAP_SYNC_USER_DATA_FIELDMAP is defined in setting LDAP_DEFAULT_DOMAIN above.
  454. #
  455. # LDAP_SYNC_GROUP_ROLES :
  456. # example :
  457. #export LDAP_SYNC_GROUP_ROLES=
  458. #
  459. # Enable/Disable syncing of admin status based on ldap groups:
  460. #export LDAP_SYNC_ADMIN_STATUS=true
  461. #
  462. # Comma separated list of admin group names to sync.
  463. #export LDAP_SYNC_ADMIN_GROUPS=group1,group2
  464. #---------------------------------------------------------------------
  465. # Login to LDAP automatically with HTTP header.
  466. # In below example for siteminder, at right side of = is header name.
  467. #export HEADER_LOGIN_ID=HEADERUID
  468. #export HEADER_LOGIN_FIRSTNAME=HEADERFIRSTNAME
  469. #export HEADER_LOGIN_LASTNAME=HEADERLASTNAME
  470. #export HEADER_LOGIN_EMAIL=HEADEREMAILADDRESS
  471. #---------------------------------------------------------------------
  472. # LOGOUT_WITH_TIMER : Enables or not the option logout with timer
  473. # example : LOGOUT_WITH_TIMER=true
  474. #export LOGOUT_WITH_TIMER=
  475. # LOGOUT_IN : The number of days
  476. # example : LOGOUT_IN=1
  477. #export LOGOUT_IN=
  478. #export LOGOUT_ON_HOURS=
  479. # LOGOUT_ON_MINUTES : The number of minutes
  480. # example : LOGOUT_ON_MINUTES=55
  481. #export LOGOUT_ON_MINUTES=
  482. #---------------------------------------------------------------------
  483. # PASSWORD_LOGIN_ENABLED : Enable or not the password login form.
  484. #export PASSWORD_LOGIN_ENABLED=true
  485. #---------------------------------------------------------------------
  486. #export CAS_ENABLED=true
  487. #export CAS_BASE_URL=https://cas.example.com/cas
  488. #export CAS_LOGIN_URL=https://cas.example.com/login
  489. #export CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
  490. #---------------------------------------------------------------------
  491. #export SAML_ENABLED=true
  492. #export SAML_PROVIDER=
  493. #export SAML_ENTRYPOINT=
  494. #export SAML_ISSUER=
  495. #export SAML_CERT=
  496. #export SAML_IDPSLO_REDIRECTURL=
  497. #export SAML_PRIVATE_KEYFILE=
  498. #export SAML_PUBLIC_CERTFILE=
  499. #export SAML_IDENTIFIER_FORMAT=
  500. #export SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
  501. #export SAML_ATTRIBUTES=
  502. #---------------------------------------------------------------------
  503. # Wait spinner to use
  504. #export WAIT_SPINNER=Bounce
  505. #---------------------------------------------------------------------
  506. # https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
  507. # Add more Node heap:
  508. export NODE_OPTIONS="--max_old_space_size=4096"
  509. # Add more stack:
  510. bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
  511. #node main.js
  512. #---------------------------------------------------------------------
  513. # & >> ../../wekan.log
  514. cd ../..
  515. #done