26e98698d8
Phase 2 and 4 of docs/roadmap/storage-locations.md. Apps can now be placed on a location and moved between them. CFG_<APP>_STORAGE lands in all 37 app templates, holding a location NAME rather than a path: names survive a migrate to a host with different disks, paths do not. The 11 infrastructure apps that other apps reach by literal path (traefik, prometheus, grafana, adguard, gluetun, crowdsec, headscale, dashy, pihole, unbound, wireguard) are pinned. libreportal itself never gets the key — it is pinned structurally by webuiDir. Pinning needed no second config key. "Pinned" is not a fact about a value, it is a statement about whether the field may be edited, so it goes in the comment beside **ADVANCED** and **DEV** as **READONLY**, and the field factory renders those disabled. That marker earns its keep beyond this feature: derived fields already warned in prose that editing them does nothing (crowdsec.config:72) next to a perfectly editable input. storage_app_config.sh keeps the comment honest — it carries the resolved path for hand-recovery and regenerates the dropdown from the registry, but only writes when something actually changed, since the app .config is user-editable and lives in the container-owned tree. app move stops the app (a live copy of a running Postgres is a corrupt copy), snapshots it, copies, verifies, and only then removes the source. The copy runs in libreportal-ownership because it must: app data holds rootless sub-UID files the manager can neither read nor recreate. Verified against two real ext4 filesystems that a cross-device move preserves uid 231141 and the payload, and that the source survives every refusal path — unregistered destination, the WebUI app, a traversal in the app name, and an occupied destination. Task titles registered in both tables, with a specific rule so a move renders as "Nextcloud - Move to bigdisk" rather than the generic fallback dropping the destination. lp-task-names could not be run to confirm — it borrows the WebUI container's node and no containers are running. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
94 lines
5.0 KiB
Plaintext
Executable File
94 lines
5.0 KiB
Plaintext
Executable File
#
|
|
# =============================================================================
|
|
# GENERAL CONFIGURATION
|
|
# =============================================================================
|
|
# APP_NAME = name of application for use in scripts
|
|
# COMPOSE_FILE = default for no app_name in the docker-compose file name, app if there is
|
|
# BACKUP = if true, include this application in backup operations
|
|
# UPDATE_TYPE = auto: new image builds are applied automatically (a recovery snapshot is taken first), manual: only when you press Update
|
|
# HEALTHCHECK = if true, default docker health checks for that container will be enabled
|
|
# AUTHELIA = if true, use Authelia authentication, if false turned off.
|
|
# HEADSCALE = options : false, local, remote (see general config). e.g false or local,remote
|
|
#
|
|
CFG_OWNCLOUD_APP_NAME=owncloud
|
|
# MULTI_INSTANCE = if true, this app can run as multiple isolated instances
|
|
# (own data/DB/subdomain/backups) via `libreportal instance create`. Only set on
|
|
# apps whose compose identity (container_name, Traefik routers, backup labels)
|
|
# is instance-safe — see scripts/instance/instance_create.sh.
|
|
CFG_OWNCLOUD_MULTI_INSTANCE=true
|
|
CFG_OWNCLOUD_BACKUP=true
|
|
# STORAGE = which storage location holds this app's data. Change it with
|
|
# `libreportal app move owncloud <location>` — editing here records intent only.
|
|
CFG_OWNCLOUD_STORAGE=default # Storage Location - Which disk holds this app's data [default:Primary]
|
|
CFG_OWNCLOUD_BACKUP_STRATEGY=auto
|
|
CFG_OWNCLOUD_UPDATE_TYPE=auto
|
|
CFG_OWNCLOUD_COMPOSE_FILE=default
|
|
CFG_OWNCLOUD_HEALTHCHECK=true
|
|
CFG_OWNCLOUD_AUTHELIA=false
|
|
CFG_OWNCLOUD_HEADSCALE=false
|
|
#
|
|
# =============================================================================
|
|
# APPLICATION CONFIGURATION
|
|
# =============================================================================
|
|
# VERSION = specific version of the application to use
|
|
# ADMIN_USERNAME = default admin username for the application
|
|
# ADMIN_PASSWORD = default admin password (will be generated if set to RANDOMIZEDPASSWORD)
|
|
# DB_NAME / DB_USER / DB_PASSWORD = MariaDB schema + app account used by ownCloud
|
|
# DB_ROOT_PASSWORD = MariaDB root account; kept separate from DB_PASSWORD so the app user can be rotated without touching root
|
|
#
|
|
# Every value below feeds the compose via #LIBREPORTAL|OWNCLOUD_<KEY>_TAG| tags.
|
|
# They are generated on first install and preserved across reinstalls — which is
|
|
# what keeps them in step with the MariaDB volume, and what makes the admin
|
|
# credentials shown in the WebUI the ones ownCloud was actually seeded with.
|
|
#
|
|
CFG_OWNCLOUD_ADMIN_USERNAME_1=RANDOMIZEDUSERNAME1
|
|
CFG_OWNCLOUD_ADMIN_PASSWORD_1=RANDOMIZEDPASSWORD1
|
|
CFG_OWNCLOUD_DB_NAME_1=RANDOMIZEDUSERNAME2
|
|
CFG_OWNCLOUD_DB_USER_1=RANDOMIZEDUSERNAME3
|
|
CFG_OWNCLOUD_DB_PASSWORD_1=RANDOMIZEDPASSWORD2
|
|
CFG_OWNCLOUD_DB_ROOT_PASSWORD_1=RANDOMIZEDPASSWORD3
|
|
#
|
|
# =============================================================================
|
|
# METADATA
|
|
# =============================================================================
|
|
# CATEGORY = application category for grouping
|
|
# TITLE = display name for the application
|
|
# DESCRIPTION = short description of the application
|
|
# LONG_DESCRIPTION = detailed description of the application
|
|
# URL = source repository or documentation URL
|
|
# ACTIONS = available actions for this application
|
|
#
|
|
CFG_OWNCLOUD_CATEGORY="storage"
|
|
CFG_OWNCLOUD_TITLE="OwnCloud"
|
|
CFG_OWNCLOUD_DESCRIPTION="Cloud Storage"
|
|
CFG_OWNCLOUD_LONG_DESCRIPTION="ownCloud is a self-hosted file sync and share server that provides secure access to your files from any device"
|
|
CFG_OWNCLOUD_URL="https://github.com/owncloud/core"
|
|
CFG_OWNCLOUD_ACTIONS="configure|install|restart|shutdown|uninstall"
|
|
#
|
|
# =============================================================================
|
|
# NETWORK CONFIGURATION
|
|
# =============================================================================
|
|
# DOMAIN = number of domain from the general config, useful when using multiple domains
|
|
# HOST NAME = subdomain name e.g test is the name for test.website.com
|
|
# WHITELIST = if true only allow whitelisted ips on traefik, if false allow all
|
|
#
|
|
CFG_OWNCLOUD_DOMAIN=1
|
|
CFG_OWNCLOUD_WHITELIST=false
|
|
CFG_OWNCLOUD_NETWORK=default
|
|
#
|
|
# =============================================================================
|
|
# PORT CONFIGURATION
|
|
# =============================================================================
|
|
# PORT_ = port configuration: app|name|external:internal|access|protocol|login|traefik|webui|description
|
|
# - app: application name
|
|
# - name: service identifier (webui, dns, ssh, etc.)
|
|
# - external:internal: port mapping (external can be 'random' for auto-allocation)
|
|
# - access: 'public' (internet accessible), 'private' (local network only), 'disabled' (not running)
|
|
# - protocol: 'tcp' or 'udp'
|
|
# - login: if true, this port requires basic-auth via Traefik (only meaningful when traefik=true)
|
|
# - traefik: if true, Traefik handles this port (reverse proxy)
|
|
# - webui: if true, this port serves the main web interface
|
|
# - description: human-readable description of the service
|
|
#
|
|
CFG_OWNCLOUD_PORT_1="owncloud-service|webui|random:8080|public|tcp|false|true|true|Web Interface||cloud"
|