7 Commits

Author	SHA1	Message	Date
Kevin Veen-Birkenbach	f106d5ec36	web-app-xwiki: admin bootstrap & REST/extension install fixes ... • Guard admin tasks via XWIKI_SSO_ENABLED • Create admin using XWikiUsers object API • Wait for REST without DW redirect • Install OIDC/LDAP via /rest/jobs (+verify) • Mount xwiki.cfg/properties under Tomcat WEB-INF • Build REST URLs with url_join; enable DW auto bootstrap + repos https://chatgpt.com/share/68c42502-a5cc-800f-b05a-a1dbe48f014d	2025-09-12 15:50:30 +02:00
Kevin Veen-Birkenbach	07b7c6484f	xwiki: switch to PostgreSQL and remove custom Hibernate override ... Config: set database.type=postgres; use image tag lts-<dbtype>-tomcat; make DB_TYPE templated; derive database_type from app config. Cleanup: delete hibernate.cfg.xml template and volume mounts; remove XWIKI_HOST_HIBERNATE_PATH; stop rendering hibernate.cfg.xml. web-svc-cdn: run_once task fix. Context: troubleshooting on 2025-09-12. Conversation link: https://chatgpt.com/share/68c3978e-77cc-800f-beda-19220f70855f	2025-09-12 05:46:45 +02:00
Kevin Veen-Birkenbach	4539817c16	Mount hibernate.cfg.xml directly into Tomcat WEB-INF to ensure validationQuery is applied and avoid PROCESS privilege errors. See https://chatgpt.com/share/68c2c4dd-beec-800f-b44a-9c84494491f8	2025-09-11 15:23:52 +02:00
Kevin Veen-Birkenbach	71276f3e5a	Add custom hibernate.cfg.xml to XWiki role to use SELECT 1 as validation query (avoids PROCESS privilege requirement in MariaDB). See https://chatgpt.com/share/68c2c4dd-beec-800f-b44a-9c84494491f8	2025-09-11 14:47:41 +02:00
Kevin Veen-Birkenbach	6418a462ec	XWiki: LDAP/OIDC admin mapping, config mounts, and REST installs ... - LDAP: move settings to xwiki.cfg; enable trylocal (1/0), group_mapping to XWiki.XWikiAdminGroup, and mode_group_sync=always. - OIDC: add groups claim request (oidc.userinfoclaims), map provider group to XWiki.XWikiAdminGroup, and use space-separated scopes. - Compose: mount xwiki.cfg and xwiki.properties into /usr/local/xwiki. - Extensions: wait for REST readiness; pre-check OIDC/LDAP extensions (URL-encoded IDs); install via REST job only if missing. - Vars: strict mappings to LDAP.* and OIDC.* (no defaults), add XWIKI_ADMIN_GROUP and derived DNs. - Config: expose ldap.local_enabled; tidy meta tags; README grammar update. Conversation: https://chatgpt.com/share/68c2b8ad-4814-800f-b377-065f967998db	2025-09-11 13:55:53 +02:00
Kevin Veen-Birkenbach	8bc6e1f921	Optimized xwiki integration	2025-09-11 12:29:39 +02:00
Kevin Veen-Birkenbach	79c623d8db	Add initial XWiki role draft ... - Added web-app-xwiki draft role with config, vars, templates, and docs - Registered new network and port for XWiki - Adjusted MediaWiki canonical domain to media.wiki https://chatgpt.com/share/68c18c65-a008-800f-8d62-b695df2c6fa1	2025-09-10 16:34:37 +02:00