digitaldemocratic/docs/extra-docs.md

3.3 KiB

Extra documentation

These configurations are automated, so are here only by informational purposes.

Keycloak configuration

Go to https://sso.DOMAIN/auth/admin/master/console

THEMES

  • login theme: dd
  • account theme: account-avatar
  • internazionalization enabled: ON
  • default locale: ca
  1. Configure -> Realm Settings -> Themes

Configure as this:

SECURITY DEFENSES

  • Change second line of Content-Security-Policy to: frame-src 'self'; frame-ancestors 'self' *.DOMAIN localhost; object-src 'none';

  • Last one to: max-age=31536000; includeSubDomains

  • Save

CLIENT SCOPES

  • client scopes => mappers => role_list => Single Role Attribute: ON

CLIENT

EVENTS

CLIENTS / account

Add a valid redirection URI

  • https://moodle.DOMAIN/*
  • https://wp.DOMAIN/*
  • /realms/master/account/*
  • https://nextcloud.DOMAIN/*

Wordpress Configuration

Configure the nickname of Wordpress:

Script:

var Output = user.getFirstName()+" "+user.getLastName();
Output;

To allow closing the SAML session from Wordpress

Add these settings:

/realms/master/account/* https://wp.DOMAIN/*

Save the configuration.

Nextcloud configuration

Email

  • To configure email:

Circles

  1. To download the Circles application: Applications -> Featured apps -> Circles (Download and enable)

  1. A new menu entry will exist in Settings

  1. Get back to Settings and click "Administration" >> "Groupware" configuration:

It could be enabled by command line:

docker exec -u www-data dd-apps-nextcloud-app php occ --no-warnings config:app:set circles members_limit --value="150"
docker exec -u www-data dd-apps-nextcloud-app php occ --no-warnings config:app:set circles allow_linked_groups --value="1"
docker exec -u www-data dd-apps-nextcloud-app php occ --no-warnings config:app:set circles skip_invitation_to_closed_circles --value="1

Other configurations

  1. Add docker network as whitelist. Administration -> Security

  2. Configure OnlyOffice templates in Nextcloud

And save

Wordpress settings

SAML2 plugin

1. Login as admin in WordPress (with closed session in other environments): https://wp.<domain>/wp-login.php?normal

2. Enable plugin "OneLogin SAML SSO" and apply changes

Generate Block plugin and GeneratePress theme

Check that GenerateBlock plugin and GeneratePress theme are installed and enabled.

Date and time

  • To set up date and time: