chenged ldap_uid to preferred_username

group_vars/all/07_applications.yml

@@ -66,7 +66,7 @@ defaults_applications:
     oidc:
       enabled:            true                    # Activate OIDC
     database:
-      central_storage:                True
+      central_storage:    True                    # Activate Central Database Storage
 
   ## Friendica
   friendica:
@@ -74,7 +74,7 @@ defaults_applications:
     oidc:
       enabled:               true   # Activate OIDC. Plugin is not working yet
     database:
-      central_storage:       True
+      central_storage:       True   # Activate Central Database Storage
 
   ## Funkwhale
   funkwhale:
@@ -82,19 +82,19 @@ defaults_applications:
     ldap:
       enabled:            True    # Enables LDAP by default @todo check implementation
     database:
-      central_storage:    True
+      central_storage:    True    # Activate Central Database Storage
 
   ## Gitea
   gitea:
     version:            "latest"
     database:
-      central_storage:                True
+      central_storage:  True      # Activate Central Database Storage
 
   ## Gitlab
   gitlab:
     version:            "latest"
     database:
-      central_storage:                True
+      central_storage:  True      # Activate Central Database Storage
 
   ## Joomla
   joomla:
@@ -109,7 +109,7 @@ defaults_applications:
     ldap:
       enabled:          True                                # Enables LDAP by default
     database: 
-      central_storage:        True
+      central_storage:  True                                # Activate Central Database Storage
 #   database_password:                                      # Needs to be defined in inventory file   
 #   administrator_password:                                 # Needs to be defined in inventory file      
 
@@ -152,7 +152,7 @@ defaults_applications:
     version:                          "latest"                            # Docker Image version
     setup:                            false                               # Set true in inventory file to execute the setup and initializing procedures
     database:
-      central_storage:                True
+      central_storage:                True                                # Activate Central Database Storage
 
   mailu:
     version:                          "2024.06"             # Docker Image Version
@@ -184,7 +184,7 @@ defaults_applications:
     css:
       enabled:          false   # The css isn't optimized yet for Matomo
     database:
-      central_storage:                True
+      central_storage:  True    # Activate Central Database Storage
 
   ## Mastodon
   mastodon:
@@ -192,9 +192,9 @@ defaults_applications:
     single_user_mode:             false     # Set true for initial setup
     setup:                        false     # Set true in inventory file to execute the setup and initializing procedures
     database:
-      central_storage:                True
+      central_storage:            True      # Activate Central Database Storage
     oidc:
-        enabled:                        true                          # Activate OIDC for Mastodon
+      enabled:                    True      # Activate OIDC for Mastodon
     credentials:
 # Check out the README.md of the docker-mastodon role to get detailled instructions about how to setup the credentials
 #     database_password:                              
@@ -222,7 +222,7 @@ defaults_applications:
       version:          "latest"
     setup:              false                               # Set true in inventory file to execute the setup and initializing procedures
     database:
-      central_storage:                True
+      central_storage:  True                                # Activate Central Database Storage
     oidc:
       enabled:          False                               # Deactivated OIDC due to this issue https://github.com/matrix-org/synapse/issues/10492
 
@@ -235,13 +235,13 @@ defaults_applications:
         email:          "{{users.administrator.email}}"
     version:            "latest"
     database:
-      central_storage:                True
+      central_storage:  True                                              # Activate Central Database Storage
 
   ## MyBB
   mybb:
     version:            "latest"
     database:
-      central_storage:                True
+      central_storage:  True      # Activate Central Database Storage
 
   ## Nextcloud
   nextcloud:
@@ -254,10 +254,10 @@ defaults_applications:
       # Available options: oidc_login, sociallogin
       # @see https://apps.nextcloud.com/apps/oidc_login
       # @see https://apps.nextcloud.com/apps/sociallogin
-      flavor:               "sociallogin"                          # Keeping on sociallogin because the other option is not implemented yet                                             
+      flavor:               "oidc_login"                                # Keeping on sociallogin because the other option is not implemented yet                                             
     force_import:           False                                       # Forces the import of the LDIF files
     database:
-      central_storage:      True
+      central_storage:      True                                        # Activate Central Database Storage
     credentials:
 #     database_password:    Null                                        # Needs to be set in inventory file
     users:      
@@ -286,7 +286,7 @@ defaults_applications:
     ldap:
       enabled:            True    # Enables LDAP by default
     database:
-      central_storage:    True 
+      central_storage:    True    # Activate Central Database Storage
     css:
       enabled:            false   # Temporary deactivated due to bugs
                                   # @todo Solve and reactivate
@@ -295,7 +295,7 @@ defaults_applications:
   peertube:
     version:              "bookworm"
     database:
-      central_storage:    True 
+      central_storage:    True        # Activate Central Database Storage
 
   ## PHPMyAdmin
   phpmyadmin:
@@ -307,7 +307,7 @@ defaults_applications:
       application:        "application"
 #     cookie_secret:      None            # Set via openssl rand -hex 16
     database:
-      central_storage:    True
+      central_storage:    True            # Activate Central Database Storage
     css:
       enabled:            False           # The css needs more optimation for PHPMyAdmin
 
@@ -316,7 +316,7 @@ defaults_applications:
     titel:                "Pictures on {{primary_domain}}"
     version:              "latest"
     database:
-      central_storage:    True
+      central_storage:    True                              # Activate Central Database Storage
 
   ## Postgres
   # Please set an version in your inventory file - Rolling release for postgres isn't recommended
@@ -331,13 +331,13 @@ defaults_applications:
   snipe_it:
     version:           "latest"
     database:
-      central_storage:  True
+      central_storage:  True    # Activate Central Database Storage
 
   ## Taiga
   taiga:
     version:           "latest"
     database:
-      central_storage:  True
+      central_storage:  True    # Activate Central Database Storage
 
   ## YOURLS
   yourls:
@@ -352,7 +352,7 @@ defaults_applications:
       location:         "/admin/"                           # Protects the admin area
 #     cookie_secret:    None                                # Set via openssl rand -hex 16
     database:
-      central_storage:        True
+      central_storage:  True                                # Activate Central Database Storage
 
   wordpress:
 # Deactivate Global theming for wordpress role
@@ -364,4 +364,4 @@ defaults_applications:
     css:
       enabled:          false
     database:
-      central_storage:  True
+      central_storage:  True  # Activate Central Database Storage

roles/docker-nextcloud/README.md

@@ -94,6 +94,11 @@ docker-compose exec -it -u www-data application /var/www/html/occ
 ```
 ### User Administration 
 
+#### List Users
+```bash
+docker compose exec -it -u www-data application php occ user:list
+```
+
 #### Create user via CLI
 ```bash
 docker compose exec -it -u www-data application php occ user:add {{username}}
@@ -150,6 +155,12 @@ docker compose exec -u www-data application /var/www/html/occ config:app:get soc
 
 More information: https://docs.nextcloud.com/server/latest/admin_manual/configuration_user/user_auth_ldap.html
 
+## Get all relevant entries except password
+
+```sql
+SELECT * FROM `oc_appconfig` WHERE appid LIKE "%ldap%" and configkey != "s01ldap_agent_password";
+```
+
 ## Federation
 
 If users are just created via Keycloak and not via LDAP, they have a different username. Due to this reaso concider to use LDAP to guaranty that the username is valid. 

roles/docker-nextcloud/templates/oidc.config.php.j2

@@ -7,7 +7,7 @@ return array (
     'lost_password_link' => 'disabled',
 
     // URL of provider. All other URLs are auto-discovered from .well-known
-    'oidc_login_provider_url' => 'https://{{oidc.client.issuer_url}}',
+    'oidc_login_provider_url' => '{{oidc.client.issuer_url}}',
 
     // Client ID and secret registered with the provider
     'oidc_login_client_id' => '{{oidc.client.id}}',
@@ -98,7 +98,7 @@ return array (
         'mail' => 'email',
         # 'quota' => 'nextcloudQuota',  # Not implemented yet
         # 'home' => 'homeDirectory',    # Not implemented yet
-        'ldap_uid' => '{{ldap.attributes.user_id}}',
+        'ldap_uid' => 'preferred_username',
         # 'groups' => 'ownCloudGroups', # Not implemented yet
         # 'login_filter' => 'realm_access_roles',
     //    'photoURL' => 'picture',

roles/docker-nextcloud/vars/ldap.yml

@@ -42,7 +42,7 @@ nextcloud_ldap_configuration:
   -
     appid: "user_ldap"
     configkey: "s01ldap_base_users"
-    configvalue: "{{ldap.dn.root}}}"
+    configvalue: "{{ldap.dn.users}}"
 
   -
     appid: "user_ldap"

roles/nginx-modifier-css/templates/global.css.j2

@@ -1069,7 +1069,6 @@ section.main.kanban{
 
 div.master, div.kanban-header, div.kanban-table-inner, section.kanban button,a.dropdown-project-list-projects{
     background-color: var(--color-92);
-    /* New Gradient based on original background (92 -5, 92, 92 +1, 92 +5) */
     background: linear-gradient({{ range(0, 361) | random }}deg, var(--color-87), var(--color-92), var(--color-93), var(--color-97));
     color: var(--color-40);
 }
@@ -1080,7 +1079,6 @@ section.kanban h1, section.kanban h2{
 
 .home-project {
     background: var(--color-88);
-    /* New Gradient based on original background (88 -5, 88, 88 +1, 88 +5) */
     background: linear-gradient({{ range(0, 361) | random }}deg, var(--color-83), var(--color-88), var(--color-89), var(--color-93));
     border-color: var(--color-60);
     color: var(--color-12);
@@ -1088,7 +1086,6 @@ section.kanban h1, section.kanban h2{
 
 .home-wrapper .title-bar {
     background: var(--color-75);
-    /* New Gradient based on original background (75 -5, 75, 75 +1, 75 +5) */
     background: linear-gradient({{ range(0, 361) | random }}deg, var(--color-70), var(--color-75), var(--color-76), var(--color-80));
 }
 
@@ -1101,6 +1098,19 @@ section.kanban h1, section.kanban h2{
     color: var(--color-10);
 }
 
+input.ng-empty::placeholder,.ng-empty::placeholder  {
+  color: rgba(var(--color-rgb-03),0.6); /* Beispiel: roter Platzhaltertext */
+}
+
+.lightbox {
+    background: rgba(var(--color-rgb-97), .93);
+    color: var(--color-03);
+}
+
+.kanban-filter tg-filter {
+    border-color: var(--color-70);
+}
+
 /* Portfolio */ 
 .card-img-top i {
     filter: drop-shadow(4px 4px 4px rgba(var(--color-rgb-23), 0.6));