start-wekan.bat 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518
  1. @ECHO OFF
  2. REM # ------------------- HOWTO ---------------------
  3. REM # https://github.com/wekan/wekan/wiki/Offline
  4. REM #-------------------- REQUIRED SETTINGS START --------------------
  5. REM # Writable path required to exist and be writable for attachments to migrate and work correctly
  6. SET WRITABLE_PATH=..
  7. REM # MongoDB database URL required
  8. SET MONGO_URL=mongodb://127.0.0.1:27017/wekan
  9. REM # If port is 80, must change ROOT_URL to: http://YOUR-WEKAN-SERVER-IPv4-ADDRESS , like http://192.168.0.100
  10. REM # If port is not 80, must change ROOT_URL to: http://YOUR-WEKAN-SERVER-IPv4-ADDRESS:YOUR-PORT-NUMBER , like http://192.168.0.100:2000
  11. REM # If ROOT_URL is not correct, these do not work: translations, uploading attachments.
  12. SET ROOT_URL=http://192.168.0.21
  13. REM # Must change to YOUR-PORT-NUMBER:
  14. SET PORT=80
  15. REM #------------------- REQUIRED SETTINGS END ----------------------
  16. REM #-------------------- OPTIONAL SETTINGS START -------------------
  17. REM # If at public Internet, required different settings:
  18. REM # - For ROOT_URL: https://github.com/wekan/wekan/wiki/Settings
  19. REM # - For SSL/TLS, also at above wiki right menu: config for Caddy/Nginx/Apache
  20. REM ------------------------------------------------------------
  21. REM # Debug OIDC OAuth2 etc.
  22. REM SET DEBUG=true
  23. REM ------------------------------------------------------------
  24. REM # ==== AWS S3 FOR FILES ====
  25. REM # Any region. For example:
  26. REM # us-standard,us-west-1,us-west-2,
  27. REM # eu-west-1,eu-central-1,
  28. REM # ap-southeast-1,ap-northeast-1,sa-east-1
  29. REM #
  30. REM SET S3='{"s3":{"key": "xxx", "secret": "xxx", "bucket": "xxx", "region": "eu-west-1"}}'
  31. REM # https://github.com/wekan/wekan/wiki/Troubleshooting-Mail
  32. REM SET MAIL_URL=smtps://username:password@email-smtp.eu-west-1.amazonaws.com:587/
  33. REM SET MAIL_FROM="Wekan Boards <info@example.com>"
  34. REM # Currently MAIL_SERVICE is not in use.
  35. REM SET MAIL_SERVICE=Outlook365
  36. REM SET MAIL_SERVICE_USER=firstname.lastname@hotmail.com
  37. REM SET MAIL_SERVICE_PASSWORD=SecretPassword
  38. REM # ==== NUMBER OF SEARCH RESULTS PER PAGE BY DEFAULT ====
  39. REM SET RESULTS_PER_PAGE=20
  40. REM # If you disable Wekan API with false, Export Board does not work.
  41. SET WITH_API=true
  42. REM # ==== RICH TEXT EDITOR IN CARD COMMENTS ====
  43. REM # https://github.com/wekan/wekan/pull/2560
  44. SET RICHER_CARD_COMMENT_EDITOR=false
  45. REM # ==== CARD OPENED, SEND WEBHOOK MESSAGE ====
  46. SET CARD_OPENED_WEBHOOK_ENABLED=false
  47. REM # ==== Allow to shrink attached/pasted image ====
  48. REM # https://github.com/wekan/wekan/pull/2544
  49. REM SET MAX_IMAGE_PIXEL=1024
  50. REM SET IMAGE_COMPRESS_RATIO=80
  51. REM # ==== PASSWORD BRUTE FORCE PROTECTION ====
  52. REM #https://atmospherejs.com/lucasantoniassi/accounts-lockout
  53. REM #Defaults below. Uncomment to change. wekan/server/accounts-lockout.js
  54. REM SET ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3
  55. REM SET ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60
  56. REM SET ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15
  57. REM SET ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3
  58. REM SET ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60
  59. REM SET ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15
  60. REM # ==== ACCOUNT OPTIONS ====
  61. REM SET ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90
  62. REM # ==== Allow configuration to validate uploaded attachments ====
  63. REM SET ATTACHMENTS_UPLOAD_EXTERNAL_PROGRAM="avscan {file}"
  64. REM SET ATTACHMENTS_UPLOAD_MIME_TYPES="image/*,text/*"
  65. REM SET ATTACHMENTS_UPLOAD_MAX_SIZE=5000000
  66. REM # ==== Allow configuration to validate uploaded avatars ====
  67. REM SET AVATARS_UPLOAD_EXTERNAL_PROGRAM="avscan {file}"
  68. REM SET AVATARS_UPLOAD_MIME_TYPES="image/*"
  69. REM SET AVATARS_UPLOAD_MAX_SIZE=500000
  70. REM # ==== NOTIFICATION TRAY AFTER READ DAYS BEFORE REMOVE =====
  71. REM # Number of days after a notification is read before we remove it.
  72. REM # Default: 2
  73. REM SET NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE=2
  74. REM # ==== BIGEVENTS DUE ETC NOTIFICATIONS =====
  75. REM # https://github.com/wekan/wekan/pull/2541
  76. REM # Introduced a system env var BIGEVENTS_PATTERN default as "NONE",
  77. REM # so any activityType matches the pattern, system will send out
  78. REM # notifications to all board members no matter they are watching
  79. REM # or tracking the board or not. Owner of the wekan server can
  80. REM # disable the feature by setting this variable to "NONE" or
  81. REM # change the pattern to any valid regex. i.e. '|' delimited
  82. REM # activityType names.
  83. REM # a) Example
  84. REM SET BIGEVENTS_PATTERN=due
  85. REM # b) All
  86. REM SET BIGEVENTS_PATTERN=received|start|due|end
  87. REM # c) Disabled
  88. SET BIGEVENTS_PATTERN=NONE
  89. REM # ==== EMAIL DUE DATE NOTIFICATION =====
  90. REM # https://github.com/wekan/wekan/pull/2536
  91. REM # System timelines will be showing any user modification for
  92. REM # dueat startat endat receivedat, also notification to
  93. REM # the watchers and if any card is due, about due or past due.
  94. REM # Notify due days, default is None.
  95. REM # SET NOTIFY_DUE_DAYS_BEFORE_AND_AFTER=2,0
  96. REM # Notify due at hour of day. Default every morning at 8am. Can be 0-23.
  97. REM # If env variable has parsing error, use default. Notification sent to watchers.
  98. REM SET NOTIFY_DUE_AT_HOUR_OF_DAY=8
  99. REM # ==== EMAIL NOTIFICATION TIMEOUT, ms =====
  100. REM # Defaut: 30000 ms = 30s
  101. REM SET EMAIL_NOTIFICATION_TIMEOUT=30000
  102. REM # CORS: Set Access-Control-Allow-Origin header. Example: *
  103. REM SET CORS=*
  104. REM # To enable the Set Access-Control-Allow-Headers header. "Authorization,Content-Type" is required for cross-origin use of the API.
  105. REM SET CORS_ALLOW_HEADERS=Authorization,Content-Type
  106. REM # To enable the Set Access-Control-Expose-Headers header. This is not needed for typical CORS situations. Example: *
  107. REM SET CORS_EXPOSE_HEADERS=*
  108. REM # Optional: Integration with Matomo https://matomo.org that is installed to your server
  109. REM # The address of the server where Matomo is hosted.
  110. REM # example: - MATOMO_ADDRESS=https://example.com/matomo
  111. REM SET MATOMO_ADDRESS=
  112. REM # ==== METRICS ALLOWED IP ADDRESSES ====
  113. REM # https://github.com/wekan/wekan/wiki/Metrics
  114. REM SET METRICS_ALLOWED_IP_ADDRESSES=192.168.0.100,192.168.0.200
  115. REM # The value of the site ID given in Matomo server for Wekan
  116. REM # example: - MATOMO_SITE_ID=12345
  117. REM SET MATOMO_SITE_ID=
  118. REM # The option do not track which enables users to not be tracked by matomo
  119. REM # example: - MATOMO_DO_NOT_TRACK=false
  120. REM SET MATOMO_DO_NOT_TRACK=
  121. REM # The option that allows matomo to retrieve the username:
  122. REM # example: MATOMO_WITH_USERNAME=true
  123. REM SET MATOMO_WITH_USERNAME=false
  124. REM # Enable browser policy and allow one trusted URL that can have iframe that has Wekan embedded inside.
  125. REM # Setting this to false is not recommended, it also disables all other browser policy protections
  126. REM # and allows all iframing etc. See wekan/server/policy.js
  127. SET BROWSER_POLICY_ENABLED=true
  128. REM # When browser policy is enabled, HTML code at this Trusted URL can have iframe that embeds Wekan inside.
  129. REM SET TRUSTED_URL=
  130. REM # What to send to Outgoing Webhook, or leave out. Example, that includes all that are default: cardId,listId,oldListId,boardId,comment,user,card,commentId .
  131. REM # example: WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
  132. REM SET WEBHOOKS_ATTRIBUTES=
  133. REM ------------------------------------------------------------
  134. REM ## ==== AUTOLOGIN WITH OIDC/OAUTH2 ====
  135. REM ## https://github.com/wekan/wekan/wiki/autologin
  136. REM # SET OIDC_REDIRECTION_ENABLED=true
  137. REM ------------------------------------------------------------
  138. REM # OAUTH2 ORACLE on premise identity manager OIM
  139. REM SET ORACLE_OIM_ENABLED=true
  140. REM ------------------------------------------------------------
  141. REM # Enable the OAuth2 connection
  142. REM # OAuth2 docs: https://github.com/wekan/wekan/wiki/OAuth2
  143. REM # example: OAUTH2_ENABLED=true
  144. REM SET OAUTH2_ENABLED=false
  145. REM # Optional OAuth2 CA Cert, see https://github.com/wekan/wekan/issues/3299
  146. REM SET OAUTH2_CA_CERT=ABCD1234
  147. REM # Use OAuth2 ADFS additional changes. Also needs OAUTH2_ENABLED=true setting.
  148. REM SET OAUTH2_ADFS_ENABLED=false
  149. REM # OAuth2 Client ID, for example from Rocket.Chat. Example: abcde12345
  150. REM # example: OAUTH2_CLIENT_ID=abcde12345
  151. REM SET OAUTH2_CLIENT_ID=
  152. REM # OAuth2 Secret, for example from Rocket.Chat: Example: 54321abcde
  153. REM # example: OAUTH2_SECRET=54321abcde
  154. REM SET OAUTH2_SECRET=
  155. REM # OAuth2 Server URL, for example Rocket.Chat. Example: https://chat.example.com
  156. REM # example: OAUTH2_SERVER_URL=https://chat.example.com
  157. REM SET OAUTH2_SERVER_URL=
  158. REM # OAuth2 Authorization Endpoint. Example: /oauth/authorize
  159. REM # example: OAUTH2_AUTH_ENDPOINT=/oauth/authorize
  160. REM SET OAUTH2_AUTH_ENDPOINT=
  161. REM # OAuth2 Userinfo Endpoint. Example: /oauth/userinfo
  162. REM # example: OAUTH2_USERINFO_ENDPOINT=/oauth/userinfo
  163. REM SET OAUTH2_USERINFO_ENDPOINT=
  164. REM # OAuth2 Token Endpoint. Example: /oauth/token
  165. REM # example: OAUTH2_TOKEN_ENDPOINT=/oauth/token
  166. REM SET OAUTH2_TOKEN_ENDPOINT=
  167. REM # OAUTH2 ID Token Whitelist Fields.
  168. REM SET OAUTH2_ID_TOKEN_WHITELIST_FIELDS=[]
  169. REM # OAUTH2 Request Permissions.
  170. REM SET OAUTH2_REQUEST_PERMISSIONS=openid profile email
  171. REM # OAuth2 ID Mapping
  172. REM SET OAUTH2_ID_MAP=
  173. REM # OAuth2 Username Mapping
  174. REM SET OAUTH2_USERNAME_MAP=
  175. REM # OAuth2 Fullname Mapping
  176. REM SET OAUTH2_FULLNAME_MAP=
  177. REM # OAuth2 Email Mapping
  178. REM SET OAUTH2_EMAIL_MAP=
  179. REM ------------------------------------------------------------
  180. REM # LDAP_ENABLE : Enable or not the connection by the LDAP
  181. REM # example : LDAP_ENABLE=true
  182. REM SET LDAP_ENABLE=false
  183. REM # LDAP_PORT : The port of the LDAP server
  184. REM # example : LDAP_PORT=389
  185. REM SET LDAP_PORT=389
  186. REM # LDAP_HOST : The host server for the LDAP server
  187. REM # example : LDAP_HOST=localhost
  188. REM SET LDAP_HOST=
  189. REM #-----------------------------------------------------------------
  190. REM # ==== LDAP AD Simple Auth ====
  191. REM # Set to true, if you want to connect with Active Directory by Simple Authentication.
  192. REM # When using AD Simple Auth, LDAP_BASEDN is not needed.
  193. REM SET LDAP_AD_SIMPLE_AUTH=true
  194. REM #-----------------------------------------------------------------
  195. REM # === LDAP User Authentication ===
  196. REM #
  197. REM # a) Option to login to the LDAP server with the user's own username and password, instead of
  198. REM # an administrator key. Default: false (use administrator key).
  199. REM #
  200. REM # b) When using AD Simple Auth, set to true, when login user is used for binding,
  201. REM # and LDAP_BASEDN is not needed.
  202. REM #
  203. REM # Example:
  204. REM SET LDAP_USER_AUTHENTICATION=true
  205. REM # Which field is used to find the user for the user authentication. Default: uid.
  206. REM SET LDAP_USER_AUTHENTICATION_FIELD=uid
  207. REM # === LDAP Default Domain ===
  208. REM #
  209. REM # a) In case AD SimpleAuth is configured, the default domain is appended to the given
  210. REM # loginname for creating the correct username for the bind request to AD.
  211. REM #
  212. REM # b) The default domain of the ldap it is used to create email if the field is not map
  213. REM # correctly with the LDAP_SYNC_USER_DATA_FIELDMAP
  214. REM #
  215. REM # Example :
  216. REM SET LDAP_DEFAULT_DOMAIN=mydomain.com
  217. REM #-----------------------------------------------------------------
  218. REM # ==== LDAP BASEDN Auth ====
  219. REM # LDAP_BASEDN : The base DN for the LDAP Tree
  220. REM # example : LDAP_BASEDN=ou=user,dc=example,dc=org
  221. REM SET LDAP_BASEDN=
  222. REM #-----------------------------------------------------------------
  223. REM # LDAP_LOGIN_FALLBACK : Fallback on the default authentication method
  224. REM # example : LDAP_LOGIN_FALLBACK=true
  225. REM SET LDAP_LOGIN_FALLBACK=false
  226. REM # LDAP_RECONNECT : Reconnect to the server if the connection is lost
  227. REM # example : LDAP_RECONNECT=false
  228. REM SET LDAP_RECONNECT=true
  229. REM # LDAP_TIMEOUT : Overall timeout, in milliseconds
  230. REM # example : LDAP_TIMEOUT=12345
  231. REM SET LDAP_TIMEOUT=10000
  232. REM # LDAP_IDLE_TIMEOUT : Specifies the timeout for idle LDAP connections in milliseconds
  233. REM # example : LDAP_IDLE_TIMEOUT=12345
  234. REM SET LDAP_IDLE_TIMEOUT=10000
  235. REM # LDAP_CONNECT_TIMEOUT : Connection timeout, in milliseconds
  236. REM # example : LDAP_CONNECT_TIMEOUT=12345
  237. REM SET LDAP_CONNECT_TIMEOUT=10000
  238. REM # LDAP_AUTHENTIFICATION : If the LDAP needs a user account to search
  239. REM # example : LDAP_AUTHENTIFICATION=true
  240. REM SET LDAP_AUTHENTIFICATION=false
  241. REM # LDAP_AUTHENTIFICATION_USERDN : The search user DN
  242. REM # example: LDAP_AUTHENTIFICATION_USERDN=cn=admin,dc=example,dc=org
  243. REM SET LDAP_AUTHENTIFICATION_USERDN=
  244. REM # The search user DN - You need quotes when you have spaces in parameters
  245. REM # 2 examples:
  246. REM SET LDAP_AUTHENTIFICATION_USERDN="CN=ldap admin,CN=users,DC=domainmatter,DC=lan"
  247. REM SET LDAP_AUTHENTIFICATION_USERDN="CN=wekan_adm,OU=serviceaccounts,OU=admin,OU=prod,DC=mydomain,DC=com"
  248. REM # LDAP_AUTHENTIFICATION_PASSWORD : The password for the search user
  249. REM # example : AUTHENTIFICATION_PASSWORD=admin
  250. REM SET LDAP_AUTHENTIFICATION_PASSWORD=
  251. REM # LDAP_LOG_ENABLED : Enable logs for the module
  252. REM # example : LDAP_LOG_ENABLED=true
  253. REM SET LDAP_LOG_ENABLED=false
  254. REM # LDAP_BACKGROUND_SYNC : If the sync of the users should be done in the background
  255. REM # example : LDAP_BACKGROUND_SYNC=true
  256. REM SET LDAP_BACKGROUND_SYNC=false
  257. REM # LDAP_BACKGROUND_SYNC_INTERVAL : At which interval does the background task sync in milliseconds
  258. REM # At which interval does the background task sync in milliseconds.
  259. REM # Leave this unset, so it uses default, and does not crash.
  260. REM # https://github.com/wekan/wekan/issues/2354#issuecomment-515305722
  261. SET LDAP_BACKGROUND_SYNC_INTERVAL=''
  262. REM # LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED :
  263. REM # example : LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=true
  264. REM SET LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false
  265. REM # LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS :
  266. REM # example : LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=true
  267. REM SET LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false
  268. REM # LDAP_ENCRYPTION : If using LDAPS
  269. REM # example : LDAP_ENCRYPTION=ssl
  270. REM SET LDAP_ENCRYPTION=false
  271. REM # LDAP_CA_CERT : The certification for the LDAPS server. Certificate needs to be included in this docker-compose.yml file.
  272. REM # example : LDAP_CA_CERT=-----BEGIN CERTIFICATE-----MIIE+zCCA+OgAwIBAgIkAhwR/6TVLmdRY6hHxvUFWc0+Enmu/Hu6cj+G2FIdAgIC...-----END CERTIFICATE-----
  273. REM SET LDAP_CA_CERT=
  274. REM # LDAP_REJECT_UNAUTHORIZED : Reject Unauthorized Certificate
  275. REM # example : LDAP_REJECT_UNAUTHORIZED=true
  276. REM SET LDAP_REJECT_UNAUTHORIZED=false
  277. REM # LDAP_USER_SEARCH_FILTER : Optional extra LDAP filters. Don't forget the outmost enclosing parentheses if needed
  278. REM # example : LDAP_USER_SEARCH_FILTER=
  279. REM SET LDAP_USER_SEARCH_FILTER=
  280. REM # LDAP_USER_SEARCH_SCOPE : base (search only in the provided DN), one (search only in the provided DN and one level deep), or sub (search the whole subtree)
  281. REM # example : LDAP_USER_SEARCH_SCOPE=one
  282. REM SET LDAP_USER_SEARCH_SCOPE=
  283. REM # LDAP_USER_SEARCH_FIELD : Which field is used to find the user
  284. REM # example : LDAP_USER_SEARCH_FIELD=uid
  285. REM SET LDAP_USER_SEARCH_FIELD=
  286. REM # LDAP_SEARCH_PAGE_SIZE : Used for pagination (0=unlimited)
  287. REM # example : LDAP_SEARCH_PAGE_SIZE=12345
  288. REM SET LDAP_SEARCH_PAGE_SIZE=0
  289. REM # LDAP_SEARCH_SIZE_LIMIT : The limit number of entries (0=unlimited)
  290. REM #33 example : LDAP_SEARCH_SIZE_LIMIT=12345
  291. REM SET LDAP_SEARCH_SIZE_LIMIT=0
  292. REM # LDAP_GROUP_FILTER_ENABLE : Enable group filtering
  293. REM # example : LDAP_GROUP_FILTER_ENABLE=true
  294. REM SET LDAP_GROUP_FILTER_ENABLE=false
  295. REM # LDAP_GROUP_FILTER_OBJECTCLASS : The object class for filtering
  296. REM # example : LDAP_GROUP_FILTER_OBJECTCLASS=group
  297. REM SET LDAP_GROUP_FILTER_OBJECTCLASS=
  298. REM # LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE :
  299. REM # example :
  300. REM SET LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE=
  301. REM # LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE :
  302. REM # example :
  303. REM SET LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE=
  304. REM # LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT :
  305. REM # example :
  306. REM SET LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT=
  307. REM # LDAP_GROUP_FILTER_GROUP_NAME :
  308. REM # example :
  309. REM SET LDAP_GROUP_FILTER_GROUP_NAME=
  310. REM # LDAP_UNIQUE_IDENTIFIER_FIELD : This field is sometimes class GUID (Globally Unique Identifier)
  311. REM # example : LDAP_UNIQUE_IDENTIFIER_FIELD=guid
  312. REM SET LDAP_UNIQUE_IDENTIFIER_FIELD=
  313. REM # LDAP_UTF8_NAMES_SLUGIFY : Convert the username to utf8
  314. REM # example : LDAP_UTF8_NAMES_SLUGIFY=false
  315. REM SET LDAP_UTF8_NAMES_SLUGIFY=true
  316. REM # LDAP_USERNAME_FIELD : Which field contains the ldap username
  317. REM # example : LDAP_USERNAME_FIELD=username
  318. REM SET LDAP_USERNAME_FIELD=
  319. REM # LDAP_MERGE_EXISTING_USERS :
  320. REM # example : LDAP_MERGE_EXISTING_USERS=true
  321. REM SET LDAP_MERGE_EXISTING_USERS=false
  322. REM # LDAP_EMAIL_MATCH_ENABLE : allow existing account matching by e-mail address when username does not match
  323. REM # example: LDAP_EMAIL_MATCH_ENABLE=true
  324. REM SET LDAP_EMAIL_MATCH_ENABLE=false
  325. REM # LDAP_EMAIL_MATCH_REQUIRE : require existing account matching by e-mail address when username does match
  326. REM # example: LDAP_EMAIL_MATCH_REQUIRE=true
  327. REM SET LDAP_EMAIL_MATCH_REQUIRE=false
  328. REM # LDAP_EMAIL_MATCH_VERIFIED : require existing account email address to be verified for matching
  329. REM # example: LDAP_EMAIL_MATCH_VERIFIED=true
  330. REM SET LDAP_EMAIL_MATCH_VERIFIED=false
  331. REM # LDAP_EMAIL_FIELD : which field contains the LDAP e-mail address
  332. REM # example: LDAP_EMAIL_FIELD=mail
  333. REM SET LDAP_EMAIL_FIELD=
  334. REM # LDAP_SYNC_USER_DATA :
  335. REM # example : LDAP_SYNC_USER_DATA=true
  336. REM SET LDAP_SYNC_USER_DATA=false
  337. REM # LDAP_SYNC_USER_DATA_FIELDMAP :
  338. REM # example : LDAP_SYNC_USER_DATA_FIELDMAP={"cn":"name", "mail":"email"}
  339. REM SET LDAP_SYNC_USER_DATA_FIELDMAP=
  340. REM # The default domain of the ldap it is used to create email if the field is not map correctly
  341. REM # with the LDAP_SYNC_USER_DATA_FIELDMAP is defined in setting LDAP_DEFAULT_DOMAIN above.
  342. REM # LDAP_SYNC_GROUP_ROLES :
  343. REM # example :
  344. REM # SET LDAP_SYNC_GROUP_ROLES=
  345. REM # Enable/Disable syncing of admin status based on ldap groups:
  346. REM SET LDAP_SYNC_ADMIN_STATUS=true
  347. REM # Comma separated list of admin group names to sync.
  348. REM SET LDAP_SYNC_ADMIN_GROUPS=group1,group2
  349. REM ------------------------------------------------
  350. REM # Enable/Disable password login form.
  351. REM SET PASSWORD_LOGIN_ENABLED=true
  352. REM ------------------------------------------------
  353. REM # Login to LDAP automatically with HTTP header.
  354. REM # In below example for siteminder, at right side of = is header name.
  355. REM SET HEADER_LOGIN_ID=HEADERUID
  356. REM SET HEADER_LOGIN_FIRSTNAME=HEADERFIRSTNAME
  357. REM SET HEADER_LOGIN_LASTNAME=HEADERLASTNAME
  358. REM SET HEADER_LOGIN_EMAIL=HEADEREMAILADDRESS
  359. REM ------------------------------------------------
  360. REM # LOGOUT_WITH_TIMER : Enables or not the option logout with timer
  361. REM # example : LOGOUT_WITH_TIMER=true
  362. REM SET LOGOUT_WITH_TIMER=
  363. REM # LOGOUT_IN : The number of days
  364. REM # example : LOGOUT_IN=1
  365. REM SET LOGOUT_IN=
  366. REM # LOGOUT_ON_HOURS : The number of hours
  367. REM # example : LOGOUT_ON_HOURS=9
  368. REM SET LOGOUT_ON_HOURS=
  369. REM # LOGOUT_ON_MINUTES : The number of minutes
  370. REM # example : LOGOUT_ON_MINUTES=55
  371. REM SET LOGOUT_ON_MINUTES=
  372. REM SET CAS_ENABLED=true
  373. REM SET CAS_BASE_URL=https://cas.example.com/cas
  374. REM SET CAS_LOGIN_URL=https://cas.example.com/login
  375. REM SET CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
  376. REM SET SAML_ENABLED=true
  377. REM SET SAML_PROVIDER=
  378. REM SET SAML_ENTRYPOINT=
  379. REM SET SAML_ISSUER=
  380. REM SET SAML_CERT=
  381. REM SET SAML_IDPSLO_REDIRECTURL=
  382. REM SET SAML_PRIVATE_KEYFILE=
  383. REM SET SAML_PUBLIC_CERTFILE=
  384. REM SET SAML_IDENTIFIER_FORMAT=
  385. REM SET SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
  386. REM SET SAML_ATTRIBUTES=
  387. REM # Wait spinner to use
  388. REM SET WAIT_SPINNER=Bounce
  389. REM # https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
  390. REM # Add more Node heap:
  391. REM # SET NODE_OPTIONS="--max_old_space_size=4096"
  392. REM # Add more stack. ulimit is not at Windows, stack-size is at Windows:
  393. REM # bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
  394. REM #node --stack-size=65500 main.js
  395. REM #-------------------- OPTIONAL SETTINGS END --------------------
  396. node main.js