6 Commits

Author	SHA1	Message	Date
Kevin Veen-Birkenbach	b7a7be4737	Fix XWiki automation bootstrap: ... - Accept HTTP 302 (Distribution Wizard redirects) in REST readiness and extension checks - Treat 302 as missing admin user during bootstrap - Move superadmin password to xwiki.cfg (correct location) - Disable automatic Distribution Wizard start in xwiki.properties - Standardize run_once includes for postgres, cdn, and xwiki roles See: https://chatgpt.com/share/68c3a67b-80b4-800f-8a90-ebdcd4abb86c	2025-09-12 06:50:24 +02:00
Kevin Veen-Birkenbach	2d71c461de	web-app-xwiki: add SuperAdmin bootstrap support ... - Added schema entry for superadminpassword - Added vars for XWIKI_SUPERADMIN_USERNAME/PASSWORD - Extended xwiki.properties.j2 to configure superadminpassword - Added 02_bootstrap_admin.yml to create XWiki admin via REST using SuperAdmin - Updated REST URLs to use XWIKI_REST_GENERAL - Enabled CSP flag unsafe-inline Conversation: https://chatgpt.com/share/68c39ddb-e9cc-800f-b32f-9d4c1e09e43e	2025-09-12 06:13:34 +02:00
Kevin Veen-Birkenbach	07b7c6484f	xwiki: switch to PostgreSQL and remove custom Hibernate override ... Config: set database.type=postgres; use image tag lts-<dbtype>-tomcat; make DB_TYPE templated; derive database_type from app config. Cleanup: delete hibernate.cfg.xml template and volume mounts; remove XWIKI_HOST_HIBERNATE_PATH; stop rendering hibernate.cfg.xml. web-svc-cdn: run_once task fix. Context: troubleshooting on 2025-09-12. Conversation link: https://chatgpt.com/share/68c3978e-77cc-800f-beda-19220f70855f	2025-09-12 05:46:45 +02:00
Kevin Veen-Birkenbach	71276f3e5a	Add custom hibernate.cfg.xml to XWiki role to use SELECT 1 as validation query (avoids PROCESS privilege requirement in MariaDB). See https://chatgpt.com/share/68c2c4dd-beec-800f-b44a-9c84494491f8	2025-09-11 14:47:41 +02:00
Kevin Veen-Birkenbach	6418a462ec	XWiki: LDAP/OIDC admin mapping, config mounts, and REST installs ... - LDAP: move settings to xwiki.cfg; enable trylocal (1/0), group_mapping to XWiki.XWikiAdminGroup, and mode_group_sync=always. - OIDC: add groups claim request (oidc.userinfoclaims), map provider group to XWiki.XWikiAdminGroup, and use space-separated scopes. - Compose: mount xwiki.cfg and xwiki.properties into /usr/local/xwiki. - Extensions: wait for REST readiness; pre-check OIDC/LDAP extensions (URL-encoded IDs); install via REST job only if missing. - Vars: strict mappings to LDAP.* and OIDC.* (no defaults), add XWIKI_ADMIN_GROUP and derived DNs. - Config: expose ldap.local_enabled; tidy meta tags; README grammar update. Conversation: https://chatgpt.com/share/68c2b8ad-4814-800f-b377-065f967998db	2025-09-11 13:55:53 +02:00
Kevin Veen-Birkenbach	79c623d8db	Add initial XWiki role draft ... - Added web-app-xwiki draft role with config, vars, templates, and docs - Registered new network and port for XWiki - Adjusted MediaWiki canonical domain to media.wiki https://chatgpt.com/share/68c18c65-a008-800f-8d62-b695df2c6fa1	2025-09-10 16:34:37 +02:00