7 Commits

Author	SHA1	Message	Date
Kevin Veen-Birkenbach	f106d5ec36	web-app-xwiki: admin bootstrap & REST/extension install fixes ... • Guard admin tasks via XWIKI_SSO_ENABLED • Create admin using XWikiUsers object API • Wait for REST without DW redirect • Install OIDC/LDAP via /rest/jobs (+verify) • Mount xwiki.cfg/properties under Tomcat WEB-INF • Build REST URLs with url_join; enable DW auto bootstrap + repos https://chatgpt.com/share/68c42502-a5cc-800f-b05a-a1dbe48f014d	2025-09-12 15:50:30 +02:00
Kevin Veen-Birkenbach	f576b42579	XWiki: two-phase bootstrap + extension install before enabling auth; add XOR validation ... - Add 02_validation.yml to prevent OIDC+LDAP enabled simultaneously - Introduce _flush_config.yml with switches (OIDC/LDAP/superadmin) - Bootstrap with native+superadmin → create admin → install extensions (superadmin) → enable final auth - Refactor REST vars (XWIKI_REST_BASE, XWIKI_REST_XWIKI, XWIKI_REST_EXTENSION_INSTALL) - Update templates to use switch vars; gate OIDC block in properties - Idempotent REST readiness waits Conversation: https://chatgpt.com/share/68c40c1e-2b3c-800f-b59f-8d37baa9ebb2	2025-09-12 14:04:02 +02:00
Kevin Veen-Birkenbach	b7a7be4737	Fix XWiki automation bootstrap: ... - Accept HTTP 302 (Distribution Wizard redirects) in REST readiness and extension checks - Treat 302 as missing admin user during bootstrap - Move superadmin password to xwiki.cfg (correct location) - Disable automatic Distribution Wizard start in xwiki.properties - Standardize run_once includes for postgres, cdn, and xwiki roles See: https://chatgpt.com/share/68c3a67b-80b4-800f-8a90-ebdcd4abb86c	2025-09-12 06:50:24 +02:00
Kevin Veen-Birkenbach	2d71c461de	web-app-xwiki: add SuperAdmin bootstrap support ... - Added schema entry for superadminpassword - Added vars for XWIKI_SUPERADMIN_USERNAME/PASSWORD - Extended xwiki.properties.j2 to configure superadminpassword - Added 02_bootstrap_admin.yml to create XWiki admin via REST using SuperAdmin - Updated REST URLs to use XWIKI_REST_GENERAL - Enabled CSP flag unsafe-inline Conversation: https://chatgpt.com/share/68c39ddb-e9cc-800f-b32f-9d4c1e09e43e	2025-09-12 06:13:34 +02:00
Kevin Veen-Birkenbach	07b7c6484f	xwiki: switch to PostgreSQL and remove custom Hibernate override ... Config: set database.type=postgres; use image tag lts-<dbtype>-tomcat; make DB_TYPE templated; derive database_type from app config. Cleanup: delete hibernate.cfg.xml template and volume mounts; remove XWIKI_HOST_HIBERNATE_PATH; stop rendering hibernate.cfg.xml. web-svc-cdn: run_once task fix. Context: troubleshooting on 2025-09-12. Conversation link: https://chatgpt.com/share/68c3978e-77cc-800f-beda-19220f70855f	2025-09-12 05:46:45 +02:00
Kevin Veen-Birkenbach	71276f3e5a	Add custom hibernate.cfg.xml to XWiki role to use SELECT 1 as validation query (avoids PROCESS privilege requirement in MariaDB). See https://chatgpt.com/share/68c2c4dd-beec-800f-b44a-9c84494491f8	2025-09-11 14:47:41 +02:00
Kevin Veen-Birkenbach	6418a462ec	XWiki: LDAP/OIDC admin mapping, config mounts, and REST installs ... - LDAP: move settings to xwiki.cfg; enable trylocal (1/0), group_mapping to XWiki.XWikiAdminGroup, and mode_group_sync=always. - OIDC: add groups claim request (oidc.userinfoclaims), map provider group to XWiki.XWikiAdminGroup, and use space-separated scopes. - Compose: mount xwiki.cfg and xwiki.properties into /usr/local/xwiki. - Extensions: wait for REST readiness; pre-check OIDC/LDAP extensions (URL-encoded IDs); install via REST job only if missing. - Vars: strict mappings to LDAP.* and OIDC.* (no defaults), add XWIKI_ADMIN_GROUP and derived DNs. - Config: expose ldap.local_enabled; tidy meta tags; README grammar update. Conversation: https://chatgpt.com/share/68c2b8ad-4814-800f-b377-065f967998db	2025-09-11 13:55:53 +02:00